NVD

Id
40019  
Name
CVE-2013-4407  
Description
HTTP::Body::Multipart in the HTTP-Body 1.08, 1.17, and earlier module for Perl uses the part of the uploaded file"s name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-11-23  
Modified Date
2014-04-01  
Seq
2013-4407  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203613 40019 CVE-2013-4407 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721634  View
203614 40019 CVE-2013-4407 openSUSE-SU-2014:0433  View
203615 40019 CVE-2013-4407 DSA-2801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23716 JVNDB-2013-005291 Perl 用 HTTP-Body の HTTP::Body::Multipart における攻撃を行われる脆弱性 Perl 用 HTTP-Body の HTTP::Body::Multipart は、一時ファイルのサフィックスとして最初の "." 文字の後にアップロードファイルの名前の一部を使用するため、攻撃を行われる脆弱性が存在します。 CVE-2013-4407 64349 CVE-2013-4407 40019 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005291.html 2013-11-21 2013-11-27 View