NVD

Id
8422  
Name
CVE-2011-1487  
Description
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-04-11  
Modified Date
2014-02-20  
Seq
2011-1487  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
48263 8422 CVE-2011-1487 FEDORA-2011-4610  View
48264 8422 CVE-2011-1487 FEDORA-2011-4631  View
48265 8422 CVE-2011-1487 SUSE-SR:2011:009  View
48266 8422 CVE-2011-1487 [oss-security] 20110401 CVE Request -- perl -- lc(), uc() routines are laundering tainted data  View
48267 8422 CVE-2011-1487 [oss-security] 20110404 Re: CVE Request -- perl -- lc(), uc() routines are laundering tainted data  View
48268 8422 CVE-2011-1487 http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99  View
48269 8422 CVE-2011-1487 http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336  View
48270 8422 CVE-2011-1487 DSA-2265  View
48271 8422 CVE-2011-1487 MDVSA-2011:091  View
48272 8422 CVE-2011-1487 47124  View
48273 8422 CVE-2011-1487 perl-laundering-security-bypass(66528)  View
48274 8422 CVE-2011-1487 https://bugzilla.redhat.com/show_bug.cgi?id=692844  View
48275 8422 CVE-2011-1487 https://bugzilla.redhat.com/show_bug.cgi?id=692898  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31357 JVNDB-2011-001597 Perl の lc、lcfirst、uc および ucfirst 関数における汚染 (Taint) 保護メカニズムを回避される脆弱性 Perl の lc、lcfirst、uc および ucfirst 関数は、汚染された入力の戻り値を Taint 属性として適用させないため、Taint 保護メカニズムを回避される脆弱性が存在します。 CVE-2011-1487 49394 CVE-2011-1487 8422 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001597.html 2011-03-01 2011-05-26 View