Perlbot Filename Variable Remote Command Execution Vulnerability
BID:6009
Info
Perlbot Filename Variable Remote Command Execution Vulnerability
| Bugtraq ID: | 6009 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2002 12:00AM |
| Updated: | Oct 18 2002 12:00AM |
| Credit: | Discovery credited to guejez of Scan Associates. |
| Vulnerable: |
Perlbot Perlbot 1.9.2 |
| Not Vulnerable: | |
Discussion
Perlbot Filename Variable Remote Command Execution Vulnerability
It has been reported that a remote command execution bug exists in Perlbot. By constructing a malicious request, it may be possible for a remote attacker to execute arbitrary commands with the privileges of Perlbot. This issue is due to insufficient sanitization of user-supplied input.
This issue was reported for Perlbot v1.9.2.
It should be noted that it is not yet known whether later versions of Perlbot are vulnerable.
It has been reported that a remote command execution bug exists in Perlbot. By constructing a malicious request, it may be possible for a remote attacker to execute arbitrary commands with the privileges of Perlbot. This issue is due to insufficient sanitization of user-supplied input.
This issue was reported for Perlbot v1.9.2.
It should be noted that it is not yet known whether later versions of Perlbot are vulnerable.
Solution / Fix
Perlbot Filename Variable Remote Command Execution Vulnerability
Solution:
The vendor will reportedly fix this vulnerability in a newer release of Perlbot.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
The vendor will reportedly fix this vulnerability in a newer release of Perlbot.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.