Perl 'Email::Address' Module Local Denial of Service Vulnerability

Bugtraq ID:	68084
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-0477
Remote:	No
Local:	Yes
Published:	Jun 18 2014 12:00AM
Updated:	Apr 13 2015 09:35PM
Credit:	Bastian Blank
Vulnerable:	Ricardo Signes Email-Address 1.904 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	Ricardo Signes Email-Address 1.905

Perl 'Email::Address' Module Local Denial of Service Vulnerability

Email::Address module for Perl is prone to a local denial-of-service vulnerability.

Successful exploits will allow local attackers to cause a denial-of-service conditions.

Email::Address prior to 1.905 are vulnerable.

Perl 'Email::Address' Module Local Denial of Service Vulnerability

An attacker can use readily available tools to exploit this issue.

Perl 'Email::Address' Module Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva perl-Email-Address-1.895.0-2.1.mbs1.noarch.rpm
  http://www.mandriva.com/en/downloads/

Perl 'Email::Address' Module Local Denial of Service Vulnerability

References:

• Perl Homepage (Perl)
  
• quoted part can be empty (Ricardo Signes)