National Cyber-Alert System

Vulnerability Summary for CVE-2005-3962

Overview

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#948385

Name: VU#948385

Hyperlink:http://www.kb.cert.org/vuls/id/948385

US-CERT Technical Alert: TA06-333A

Name: TA06-333A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-333A.html

External Source: MISC

Name: http://www.dyadsecurity.com/perl-0002.html

Type: Advisory; Patch Information

Hyperlink:http://www.dyadsecurity.com/perl-0002.html

External Source: FULLDISC

Name: 20051201 Perl format string integer wrap vulnerability

Type: Advisory; Patch Information

Hyperlink:http://marc.theaimsgroup.com/?l=full-disclosure&m=113342788118630&w=2

External Source: FEDORA

Name: FLSA-2006:176731

Hyperlink:https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html

External Source: UBUNTU

Name: USN-222-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-222-1

External Source: TRUSTIX

Name: TSLSA-2005-0070

Hyperlink:http://www.trustix.org/errata/2005/0070

External Source: BID

Name: 15629

Hyperlink:http://www.securityfocus.com/bid/15629

External Source: HP

Name: HPSBTU02125

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/438726/100/0/threaded

External Source: HP

Name: HPSBTU02125

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/438726/100/0/threaded

External Source: BUGTRAQ

Name: 20051201 Perl format string integer wrap vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/418333/100/0/threaded

External Source: REDHAT

Name: RHSA-2005:881

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-881.html

External Source: REDHAT

Name: RHSA-2005:880

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-880.html

External Source: OSVDB

Name: 22255

Hyperlink:http://www.osvdb.org/22255

External Source: OSVDB

Name: 21345

Hyperlink:http://www.osvdb.org/21345

External Source: OPENPKG

Name: OpenPKG-SA-2005.025

Hyperlink:http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html

External Source: OPENBSD

Name: [3.7] 20060105 007: SECURITY FIX: January 5, 2006

Hyperlink:http://www.openbsd.org/errata37.html#perl

External Source: SUSE

Name: SUSE-SA:2005:071

Hyperlink:http://www.novell.com/linux/security/advisories/2005_71_perl.html

External Source: GENTOO

Name: GLSA-200512-01

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200512-01.xml

External Source: VUPEN

Name: ADV-2006-0771

Hyperlink:http://www.frsirt.com/english/advisories/2006/0771

External Source: VUPEN

Name: ADV-2005-2688

Hyperlink:http://www.frsirt.com/english/advisories/2005/2688

External Source: DEBIAN

Name: DSA-943

Hyperlink:http://www.debian.org/security/2006/dsa-943

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm

External Source: SUNALERT

Name: 102192

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1

External Source: SECUNIA

Name: 19041

Hyperlink:http://secunia.com/advisories/19041

External Source: SECUNIA

Name: 18517

Hyperlink:http://secunia.com/advisories/18517

External Source: SECUNIA

Name: 18413

Hyperlink:http://secunia.com/advisories/18413

External Source: SECUNIA

Name: 18295

Hyperlink:http://secunia.com/advisories/18295

External Source: SECUNIA

Name: 18187

Hyperlink:http://secunia.com/advisories/18187

External Source: SECUNIA

Name: 18183

Hyperlink:http://secunia.com/advisories/18183

External Source: SECUNIA

Name: 18075

Hyperlink:http://secunia.com/advisories/18075

External Source: SECUNIA

Name: 17993

Hyperlink:http://secunia.com/advisories/17993

External Source: SECUNIA

Name: 17952

Hyperlink:http://secunia.com/advisories/17952

External Source: SECUNIA

Name: 17941

Hyperlink:http://secunia.com/advisories/17941

External Source: SECUNIA

Name: 17844

Hyperlink:http://secunia.com/advisories/17844

External Source: SECUNIA

Name: 17802

Hyperlink:http://secunia.com/advisories/17802

External Source: SECUNIA

Name: 17762

Hyperlink:http://secunia.com/advisories/17762

External Source: FULLDISC

Name: 20051201 Perl format string integer wrap vulnerability

Hyperlink:http://marc.theaimsgroup.com/?l=full-disclosure&m=113342788118630&w=2

External Source: MANDRAKE

Name: MDKSA-2005:225

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:225

External Source: CONECTIVA

Name: CLSA-2006:1056

Hyperlink:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056

External Source: SGI

Name: 20060101-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U

External Source: MISC

Name: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch

Hyperlink:ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch

External Source: MISC

Name: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch

Hyperlink:ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch

External Source: HP

Name: HPSBTU02125

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/438726/100/0/threaded

External Source: SUSE

Name: SUSE-SR:2005:029

Hyperlink:http://www.novell.com/linux/security/advisories/2005_29_sr.html

External Source: MANDRAKE

Name: MDKSA-2005:225

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:225

External Source: CONFIRM

Name: http://www.ipcop.org/index.php?name=News&file=article&sid=41

Hyperlink:http://www.ipcop.org/index.php?name=News&file=article&sid=41

External Source: VUPEN

Name: ADV-2006-4750

Hyperlink:http://www.frsirt.com/english/advisories/2006/4750

External Source: VUPEN

Name: ADV-2006-2613

Hyperlink:http://www.frsirt.com/english/advisories/2006/2613

External Source: SECUNIA

Name: 31208

Hyperlink:http://secunia.com/advisories/31208

External Source: SECUNIA

Name: 23155

Hyperlink:http://secunia.com/advisories/23155

External Source: SECUNIA

Name: 20894

Hyperlink:http://secunia.com/advisories/20894

External Source: APPLE

Name: APPLE-SA-2006-11-28

Hyperlink:http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

External Source: CONFIRM

Name: http://docs.info.apple.com/article.html?artnum=304829

Hyperlink:http://docs.info.apple.com/article.html?artnum=304829

US Government Resource: oval:org.mitre.oval:def:1074

Name: oval:org.mitre.oval:def:1074

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1074