CVSS: 9.8EPSS: 11%CPEs: 51EXPL: 0CVE-2007-5116 – perl regular expression UTF parsing errors
https://notcve.org/view.php?id=CVE-2007-5116
07 Nov 2007 — Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression. Desbordamiento de búfer en el soporte opcode polimórfico del Motor de Expresiones Regulares (regcomp.c) en Perl 5.8 permite a atacantes dependientes de contexto ejecutar código de su elección cambiando de byte a caracteres Unicode (UTF) en una expresión regular. Multi... • ftp://aix.software.ibm.com/aix/efixes/security/README • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2005-4278
https://notcve.org/view.php?id=CVE-2005-4278
16 Dec 2005 — Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. • http://secunia.com/advisories/17232 •
CVSS: 9.1EPSS: 0%CPEs: 4EXPL: 0CVE-2005-0448
https://notcve.org/view.php?id=CVE-2005-0448
12 Mar 2005 — Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452. • ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2005-0155 – Setuid perl - 'PerlIO_Debug()' Root Owned File Creation Privilege Escalation
https://notcve.org/view.php?id=CVE-2005-0155
07 Feb 2005 — The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable. • https://www.exploit-db.com/exploits/792 •
CVSS: 9.1EPSS: 0%CPEs: 32EXPL: 2CVE-2005-0156 – Setuid perl - 'PerlIO_Debug()' Local Overflow
https://notcve.org/view.php?id=CVE-2005-0156
07 Feb 2005 — Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree. • https://www.exploit-db.com/exploits/791 •
CVSS: 9.8EPSS: 6%CPEs: 20EXPL: 2CVE-2004-2286 – ActivePerl 5.x / Larry Wall Perl 5.x - Duplication Operator Integer Overflow
https://notcve.org/view.php?id=CVE-2004-2286
31 Dec 2004 — Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow. • https://www.exploit-db.com/exploits/24130 •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-2004-0452
https://notcve.org/view.php?id=CVE-2004-0452
21 Dec 2004 — Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack. • ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2004-0976
https://notcve.org/view.php?id=CVE-2004-0976
20 Oct 2004 — Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. • http://fedoranews.org/updates/FEDORA--.shtml •
CVSS: 10.0EPSS: 11%CPEs: 2EXPL: 0CVE-2004-0377
https://notcve.org/view.php?id=CVE-2004-0377
06 Apr 2004 — Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character. Desbordamiento de búfer en la función win32_stat de ActivePerl de ActiveState, y Perl de Larry Wall anterior a 5.8.3 permite a atacantes remotos ejecutar comandos arbitrarios mediante nombres de fichero que terminan en un carácter "" (barra invertida). • http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0900
https://notcve.org/view.php?id=CVE-2003-0900
31 Dec 2003 — Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier for attackers to predict random numbers. • https://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=108711 •