CVE-2011-1487

Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Las funciones (1) lc, (2) lcfirst, (3) uc, y (4) ucfirst en Perl v5.10.x, v5.11.x, y v5.12.x hasta v5.12.3, y v5.13.x hasta v5.13.11, no aplica el atributo taint para devolver el valor sobre el proceso de entrada tainted, lo que puede permitir a atacantes dependientes del contexto evitar el mecanismo de protección de taint a través de una cadena manipulada.

Mark Martinec discovered that Perl incorrectly clears the tainted flag on values returned by case conversion functions such as "lc". This may expose preexisting vulnerabilities in applications which use these functions while processing untrusted input. No such applications are known at this stage. Such applications will cease to work when this security update is applied because taint checks are designed to prevent such unsafe use of untrusted input data.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-03-21 CVE Reserved
2011-03-30 First Exploit
2011-04-11 CVE Published
2024-08-06 CVE Updated
2025-05-16 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (17)

URL	Tag	Source
http://secunia.com/advisories/44168	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=692844	X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/66528	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/35554	2011-03-30
http://openwall.com/lists/oss-security/2011/04/01/3	2024-08-06
http://openwall.com/lists/oss-security/2011/04/04/35	2024-08-06
http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336	2024-08-06
http://www.securityfocus.com/bid/47124	2024-08-06
https://bugzilla.redhat.com/show_bug.cgi?id=692898	2024-08-06

URL	Date	SRC
http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99	2017-08-17

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html	2017-08-17
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html	2017-08-17
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html	2017-08-17
http://secunia.com/advisories/43921	2017-08-17
http://www.debian.org/security/2011/dsa-2265	2017-08-17
http://www.mandriva.com/security/advisories?name=MDVSA-2011:091	2017-08-17
https://access.redhat.com/security/cve/CVE-2011-1487	2011-05-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.0 Search vendor "Perl" for product "Perl" and version "5.10.0"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.0 Search vendor "Perl" for product "Perl" and version "5.10.0"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.0 Search vendor "Perl" for product "Perl" and version "5.10.0"		rc2		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.1 Search vendor "Perl" for product "Perl" and version "5.10.1"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.1 Search vendor "Perl" for product "Perl" and version "5.10.1"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.10.1 Search vendor "Perl" for product "Perl" and version "5.10.1"		rc2		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.0 Search vendor "Perl" for product "Perl" and version "5.13.0"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.1 Search vendor "Perl" for product "Perl" and version "5.13.1"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.2 Search vendor "Perl" for product "Perl" and version "5.13.2"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.3 Search vendor "Perl" for product "Perl" and version "5.13.3"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.4 Search vendor "Perl" for product "Perl" and version "5.13.4"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.5 Search vendor "Perl" for product "Perl" and version "5.13.5"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.6 Search vendor "Perl" for product "Perl" and version "5.13.6"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.7 Search vendor "Perl" for product "Perl" and version "5.13.7"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.8 Search vendor "Perl" for product "Perl" and version "5.13.8"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.9 Search vendor "Perl" for product "Perl" and version "5.13.9"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.10 Search vendor "Perl" for product "Perl" and version "5.13.10"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.13.11 Search vendor "Perl" for product "Perl" and version "5.13.11"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.0 Search vendor "Perl" for product "Perl" and version "5.11.0"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.1 Search vendor "Perl" for product "Perl" and version "5.11.1"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.2 Search vendor "Perl" for product "Perl" and version "5.11.2"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.3 Search vendor "Perl" for product "Perl" and version "5.11.3"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.4 Search vendor "Perl" for product "Perl" and version "5.11.4"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.11.5 Search vendor "Perl" for product "Perl" and version "5.11.5"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc0		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc2		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc3		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc4		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.0 Search vendor "Perl" for product "Perl" and version "5.12.0"		rc5		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.1 Search vendor "Perl" for product "Perl" and version "5.12.1"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.1 Search vendor "Perl" for product "Perl" and version "5.12.1"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.1 Search vendor "Perl" for product "Perl" and version "5.12.1"		rc2		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.2 Search vendor "Perl" for product "Perl" and version "5.12.2"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.2 Search vendor "Perl" for product "Perl" and version "5.12.2"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.3 Search vendor "Perl" for product "Perl" and version "5.12.3"		-		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.3 Search vendor "Perl" for product "Perl" and version "5.12.3"		rc1		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.3 Search vendor "Perl" for product "Perl" and version "5.12.3"		rc2		Affected
Perl Search vendor "Perl"		Perl Search vendor "Perl" for product "Perl"				5.12.3 Search vendor "Perl" for product "Perl" and version "5.12.3"		rc3		Affected