|
|
>> Fedora Security Update Fixes Perl Expression Engine Buffer Overflow
|
Title : Fedora Security Update Fixes Perl Expression Engine Buffer Overflow
VUPEN ID : VUPEN/ADV-2007-4079
CVE ID : CVE-2007-5116
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-12-04
|
A vulnerability has been identified in Fedora, which could be exploited by attackers to cause a denial of service or execute arbitrary code. This issue is caused by an error in Perl. For additional information, see : VUPEN/ADV-2007-3724
Affected Products
Fedora Core 6
Solution
Upgrade the affected packages :
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
e10d40ba71d4dcacdca56bcd9ca55e54c41bc9e0 SRPMS/perl-5.8.8-12.src.rpm
e10d40ba71d4dcacdca56bcd9ca55e54c41bc9e0 noarch/perl-5.8.8-12.src.rpm
7fbc0cf444ac148c12683e614f53b798ab65d367 ppc/debug/perl-debuginfo-5.8.8-12.ppc.rpm
153d19afcd11b5cf2e4d3f67d479a7fce6546d0d ppc/perl-5.8.8-12.ppc.rpm
45b597fcce59d539ac935f29ffe876f21c81d002 ppc/perl-suidperl-5.8.8-12.ppc.rpm
a8529bf51cc62f54fc8f65644b38d3979af1f89a x86_64/perl-5.8.8-12.x86_64.rpm
a14840946f074a2835d5e452d6fd2f8b5acab8b3 x86_64/debug/perl-debuginfo-5.8.8-12.x86_64.rpm
e25954d9fc86e9df31f25632f1b90a7192610dd5 x86_64/perl-suidperl-5.8.8-12.x86_64.rpm
8ae187f01dd5596551c660334131a0e88607d7f3 i386/perl-suidperl-5.8.8-12.i386.rpm
2b8f5896286c45ff379a2f72cf3f748d5479df5e i386/perl-5.8.8-12.i386.rpm
7ad788e2a3710ad5fc2319c17556229b6da37a8e i386/debug/perl-debuginfo-5.8.8-12.i386.rpm
References
http://www.vupen.com/english/advisories/2007/4079
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00120.html
ChangeLog
2007-12-04 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
