Vulnerability Details CVE-2004-0377
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.102
EPSS Ranking 92.8%
CVSS Severity
CVSS v2 Score 10.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html
- http://marc.info/?l=bugtraq&m=108118694327979&w=2
- http://public.activestate.com/cgi-bin/perlbrowse?patch=22552
- http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities
- http://www.kb.cert.org/vuls/id/722414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15732
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html
- http://marc.info/?l=bugtraq&m=108118694327979&w=2
- http://public.activestate.com/cgi-bin/perlbrowse?patch=22552
- http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities
- http://www.kb.cert.org/vuls/id/722414
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15732
Products affected by CVE-2004-0377
-
cpe:2.3:a:activestate:activeperl:-
-
cpe:2.3:a:activestate:activeperl:5.10.1002
-
cpe:2.3:a:activestate:activeperl:5.10.1004
-
cpe:2.3:a:activestate:activeperl:5.10.1005
-
cpe:2.3:a:activestate:activeperl:5.10.1006
-
cpe:2.3:a:activestate:activeperl:5.10.1007
-
cpe:2.3:a:activestate:activeperl:5.10.1008
-
cpe:2.3:a:activestate:activeperl:5.12.1201
-
cpe:2.3:a:activestate:activeperl:5.12.1202
-
cpe:2.3:a:activestate:activeperl:5.12.1203
-
cpe:2.3:a:activestate:activeperl:5.12.1204
-
cpe:2.3:a:activestate:activeperl:5.14.1402
-
cpe:2.3:a:activestate:activeperl:5.6.1
-
cpe:2.3:a:activestate:activeperl:5.6.1.629
-
cpe:2.3:a:activestate:activeperl:5.6.1.630
-
cpe:2.3:a:activestate:activeperl:5.6.1.635
-
cpe:2.3:a:activestate:activeperl:5.6.2
-
cpe:2.3:a:activestate:activeperl:5.6.3
-
cpe:2.3:a:activestate:activeperl:5.6.633
-
cpe:2.3:a:activestate:activeperl:5.6.635
-
cpe:2.3:a:activestate:activeperl:5.6.638
-
cpe:2.3:a:activestate:activeperl:5.7.1
-
cpe:2.3:a:activestate:activeperl:5.7.2
-
cpe:2.3:a:activestate:activeperl:5.7.3
-
cpe:2.3:a:activestate:activeperl:5.8
-
cpe:2.3:a:activestate:activeperl:5.8.1
-
cpe:2.3:a:activestate:activeperl:5.8.3
-
cpe:2.3:a:activestate:activeperl:5.8.7
-
cpe:2.3:a:activestate:activeperl:5.8.8.815
-
cpe:2.3:a:activestate:activeperl:5.8.8.817
-
cpe:2.3:a:activestate:activeperl:5.8.8.820
-
cpe:2.3:a:activestate:activeperl:5.8.807
-
cpe:2.3:a:activestate:activeperl:5.8.809
-
cpe:2.3:a:activestate:activeperl:5.8.810
-
cpe:2.3:a:activestate:activeperl:5.8.819
-
cpe:2.3:a:activestate:activeperl:5.8.820
-
cpe:2.3:a:activestate:activeperl:5.8.824
-
cpe:2.3:a:activestate:activeperl:5.8.827
-
cpe:2.3:a:activestate:activeperl:5.8.828
-
cpe:2.3:a:larry_wall:perl:*