Novell NetWare HTTP Post Arbitrary Perl Code Execution Vulnerability

Bugtraq ID:	5520
Class:	Unknown
CVE:	CVE-2002-1436
Remote:	Yes
Local:	No
Published:	Aug 20 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Credited to Rain Forrest Puppy <[email protected]>.
Vulnerable:	Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 5.1 SP4 Novell Netware 5.1
Not Vulnerable:

Novell NetWare HTTP Post Arbitrary Perl Code Execution Vulnerability

A vulnerability has been reported in some versions of Novell NetWare. This issue lies in the handling of some HTTP requests when Perl is used as a handler by a web server.

Reportedly, it is possible for an attacker to execute arbitrary Perl code. Full technical details are not currently available.

This issue has been reported in versions of NetWare using Perl 5.003. Reportedly, systems with Perl 5.6 installed are not vulnerable to this issue.

Novell NetWare HTTP Post Arbitrary Perl Code Execution Vulnerability

The following exploit has been provided by Dan Elder <[email protected]>.

• /data/vulnerabilities/exploits/netware.pl

Novell NetWare HTTP Post Arbitrary Perl Code Execution Vulnerability

Solution:
An update is available:


Novell Netware 5.1 SP4

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 5.1

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 6.0

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell Netware 6.0 SP1

• Novell perl5002.exe
  Free registration is required.
  http://support.novell.com/servlet/filedownload/ftf/perl5002.exe/

Novell NetWare HTTP Post Arbitrary Perl Code Execution Vulnerability

References:

• Security Alerts (Novell)
  
• Technical Information Document 2963307 (Novell)