|
|
Family: Ubuntu Local Security Checks --> Category: infos
USN16-1 : perl vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
perl vulnerabilities
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- libcgi-fast-perl
- libperl-dev
- libperl5.8
- perl
- perl-base
- perl-debug
- perl-doc
- perl-modules
- perl-suid
Description :
Recently, Trustix Secure Linux discovered some vulnerabilities in the
perl package. The utility "instmodsh", the Perl package "PPPort.pm",
and several test scripts (which are not shipped and only used during
build) created temporary files in an insecure way, which could allow a
symlink attack to create or overwrite arbitrary files with the
rights of the user invoking the program, or building the perl
package, respectively.
Solution :
Upgrade to :
- libcgi-fast-perl-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- libperl-dev-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- libperl5.8-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-base-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-debug-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-doc-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-modules-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
- perl-suid-5.8.4-2ubuntu0.1 (Ubuntu 4.10)
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
