Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
BID:10380
Info
Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
| Bugtraq ID: | 10380 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 18 2004 12:00AM |
| Updated: | May 18 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Matt Murphy. |
| Vulnerable: |
Larry Wall Perl 5.8.3 Larry Wall Perl 5.8.1 Larry Wall Perl 5.8 Larry Wall Perl 5.6.1 Larry Wall Perl 5.6 Larry Wall Perl 5.0 05_003 Larry Wall Perl 5.0 05 Larry Wall Perl 5.0 04_05 Larry Wall Perl 5.0 04 Larry Wall Perl 5.0 03 Activestate ActivePerl 5.8.3 Activestate ActivePerl 5.8.1 Activestate ActivePerl 5.8 Activestate ActivePerl 5.7.3 Activestate ActivePerl 5.7.2 Activestate ActivePerl 5.7.1 Activestate ActivePerl 5.6.3 Activestate ActivePerl 5.6.2 Activestate ActivePerl 5.6.1 .630 Activestate ActivePerl 5.6.1 |
| Not Vulnerable: | |
Discussion
Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable.
The issue is reported to exist due to a lack of sufficient bounds checking that is performed on multiplier data that is passed to a Perl duplicator statement. This vulnerability may permit an attacker to influence execution flow of a vulnerable Perl script to ultimately execute arbitrary code. Failed exploit attempts will result in a denial of service.
ActiveState Perl is reported to be prone to an integer overflow vulnerability. It is revealed through testing that other implementations are also vulnerable.
The issue is reported to exist due to a lack of sufficient bounds checking that is performed on multiplier data that is passed to a Perl duplicator statement. This vulnerability may permit an attacker to influence execution flow of a vulnerable Perl script to ultimately execute arbitrary code. Failed exploit attempts will result in a denial of service.
Exploit / POC
Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
The following proof of concept is reported to trigger the vulnerability:
$var = "ABCD"x0x40000000;
The following proof of concept is reported to trigger the vulnerability:
$var = "ABCD"x0x40000000;
Solution / Fix
Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Perl Implementation Duplication Operator Integer Overflow Vulnerability
References:
References:
- Larry Wall's Very Own Perl Page (Larry Wall)