CVE-2011-2201

N/A

Descripcion

The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado9/14/2011

Ultima modificacion4/29/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

mark_stosberg:data\perl:perl

Debilidades (CWE)

CWE-264

Referencias

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511(secalert@redhat.com)

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2011/06/12/3(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2011/06/13/13(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2011/06/13/5(secalert@redhat.com)

http://www.securityfocus.com/bid/48167(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=712694(secalert@redhat.com)

https://rt.cpan.org/Public/Bug/Display.html?id=61792(secalert@redhat.com)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511(af854a3a-2127-422b-91ae-364da2661108)

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2011/06/12/3(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2011/06/13/13(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2011/06/13/5(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/48167(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=712694(af854a3a-2127-422b-91ae-364da2661108)

https://rt.cpan.org/Public/Bug/Display.html?id=61792(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.