{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated perl packages that fix multiple security issues are now available\nfor Red Hat Enterprise Linux 4 and 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Perl is a high-level programming language commonly used for system\nadministration utilities and web programming.\n\nIt was found that the \"new\" constructor of the Digest module used its\nargument as part of the string expression passed to the eval() function. An\nattacker could possibly use this flaw to execute arbitrary Perl code with\nthe privileges of a Perl program that uses untrusted input as an argument\nto the constructor. (CVE-2011-3597)\n\nIt was found that the Perl CGI module used a hard-coded value for the MIME\nboundary string in multipart/x-mixed-replace content. A remote attacker\ncould possibly use this flaw to conduct an HTTP response splitting attack\nvia a specially-crafted HTTP request. (CVE-2010-2761)\n\nA CRLF injection flaw was found in the way the Perl CGI module processed a\nsequence of non-whitespace preceded by newline characters in the header. A\nremote attacker could use this flaw to conduct an HTTP response splitting\nattack via a specially-crafted sequence of characters provided to the CGI\nmodule. (CVE-2010-4410)\n\nAll Perl users should upgrade to these updated packages, which contain\nbackported patches to correct these issues. All running Perl programs must\nbe restarted for this update to take effect.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2011:1797", "url": "https://access.redhat.com/errata/RHSA-2011:1797" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "658976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=658976" }, { "category": "external", "summary": "743010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=743010" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1797.json" } ], "title": "Red Hat Security Advisory: perl security update", "tracking": { "current_release_date": "2026-06-25T10:37:54+00:00", "generator": { "date": "2026-06-25T10:37:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.1.0" } }, "id": "RHSA-2011:1797", "initial_release_date": "2011-12-08T18:56:00+00:00", "revision_history": [ { "date": "2011-12-08T18:56:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2011-12-08T19:04:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-25T10:37:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4", "product": { "name": "Red Hat Enterprise Linux AS version 4", "product_id": "4AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::as" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop version 4", "product": { "name": "Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4", "product": { "name": "Red Hat Enterprise Linux ES version 4", "product_id": "4ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4", "product": { "name": "Red Hat Enterprise Linux WS version 4", "product_id": "4WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::ws" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product": { "name": "Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux (v. 5 server)", "product": { "name": "Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:5::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.ia64", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.ia64", "product_id": "perl-suidperl-3:5.8.5-57.el4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=ia64&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.ia64", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.ia64", "product_id": "perl-debuginfo-3:5.8.5-57.el4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=ia64&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.ia64", "product": { "name": "perl-3:5.8.5-57.el4.ia64", "product_id": "perl-3:5.8.5-57.el4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=ia64&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.ia64", "product": { "name": "perl-4:5.8.8-32.el5_7.6.ia64", "product_id": "perl-4:5.8.8-32.el5_7.6.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=ia64&epoch=4" } } }, { "category": "product_version", "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "product": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "product_id": "perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.8-32.el5_7.6?arch=ia64&epoch=4" } } }, { "category": "product_version", "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "product": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "product_id": "perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.8-32.el5_7.6?arch=ia64&epoch=4" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.i386", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.i386", "product_id": "perl-suidperl-3:5.8.5-57.el4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=i386&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.i386", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.i386", "product_id": "perl-debuginfo-3:5.8.5-57.el4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=i386&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.i386", "product": { "name": "perl-3:5.8.5-57.el4.i386", "product_id": "perl-3:5.8.5-57.el4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=i386&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.i386", "product": { "name": "perl-4:5.8.8-32.el5_7.6.i386", "product_id": "perl-4:5.8.8-32.el5_7.6.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=i386&epoch=4" } } }, { "category": "product_version", "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "product": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "product_id": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.8-32.el5_7.6?arch=i386&epoch=4" } } }, { "category": "product_version", "name": "perl-suidperl-4:5.8.8-32.el5_7.6.i386", "product": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.i386", "product_id": "perl-suidperl-4:5.8.8-32.el5_7.6.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.8-32.el5_7.6?arch=i386&epoch=4" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.x86_64", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.x86_64", "product_id": "perl-suidperl-3:5.8.5-57.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=x86_64&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "product_id": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=x86_64&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.x86_64", "product": { "name": "perl-3:5.8.5-57.el4.x86_64", "product_id": "perl-3:5.8.5-57.el4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=x86_64&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.x86_64", "product": { "name": "perl-4:5.8.8-32.el5_7.6.x86_64", "product_id": "perl-4:5.8.8-32.el5_7.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=x86_64&epoch=4" } } }, { "category": "product_version", "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "product": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "product_id": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.8-32.el5_7.6?arch=x86_64&epoch=4" } } }, { "category": "product_version", "name": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "product": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "product_id": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.8-32.el5_7.6?arch=x86_64&epoch=4" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-57.el4.src", "product": { "name": "perl-3:5.8.5-57.el4.src", "product_id": "perl-3:5.8.5-57.el4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=src&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.src", "product": { "name": "perl-4:5.8.8-32.el5_7.6.src", "product_id": "perl-4:5.8.8-32.el5_7.6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=src&epoch=4" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.ppc", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.ppc", "product_id": "perl-suidperl-3:5.8.5-57.el4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=ppc&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.ppc", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.ppc", "product_id": "perl-debuginfo-3:5.8.5-57.el4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=ppc&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.ppc", "product": { "name": "perl-3:5.8.5-57.el4.ppc", "product_id": "perl-3:5.8.5-57.el4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=ppc&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.ppc", "product": { "name": "perl-4:5.8.8-32.el5_7.6.ppc", "product_id": "perl-4:5.8.8-32.el5_7.6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=ppc&epoch=4" } } }, { "category": "product_version", "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "product": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "product_id": "perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.8-32.el5_7.6?arch=ppc&epoch=4" } } }, { "category": "product_version", "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "product": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "product_id": "perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.8-32.el5_7.6?arch=ppc&epoch=4" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.s390x", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.s390x", "product_id": "perl-suidperl-3:5.8.5-57.el4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=s390x&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.s390x", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.s390x", "product_id": "perl-debuginfo-3:5.8.5-57.el4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=s390x&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.s390x", "product": { "name": "perl-3:5.8.5-57.el4.s390x", "product_id": "perl-3:5.8.5-57.el4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=s390x&epoch=3" } } }, { "category": "product_version", "name": "perl-4:5.8.8-32.el5_7.6.s390x", "product": { "name": "perl-4:5.8.8-32.el5_7.6.s390x", "product_id": "perl-4:5.8.8-32.el5_7.6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.8-32.el5_7.6?arch=s390x&epoch=4" } } }, { "category": "product_version", "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "product": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "product_id": "perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.8-32.el5_7.6?arch=s390x&epoch=4" } } }, { "category": "product_version", "name": "perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "product": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "product_id": "perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.8-32.el5_7.6?arch=s390x&epoch=4" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "perl-suidperl-3:5.8.5-57.el4.s390", "product": { "name": "perl-suidperl-3:5.8.5-57.el4.s390", "product_id": "perl-suidperl-3:5.8.5-57.el4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-57.el4?arch=s390&epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-57.el4.s390", "product": { "name": "perl-debuginfo-3:5.8.5-57.el4.s390", "product_id": "perl-debuginfo-3:5.8.5-57.el4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-57.el4?arch=s390&epoch=3" } } }, { "category": "product_version", "name": "perl-3:5.8.5-57.el4.s390", "product": { "name": "perl-3:5.8.5-57.el4.s390", "product_id": "perl-3:5.8.5-57.el4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-57.el4?arch=s390&epoch=3" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.ppc" }, "product_reference": "perl-3:5.8.5-57.el4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.s390" }, "product_reference": "perl-3:5.8.5-57.el4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.s390x" }, "product_reference": "perl-3:5.8.5-57.el4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.src as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.src" }, "product_reference": "perl-3:5.8.5-57.el4.src", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.s390" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.ppc" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.s390" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.s390x" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.src as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-57.el4.src" }, "product_reference": "perl-3:5.8.5-57.el4.src", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.src as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-57.el4.src" }, "product_reference": "perl-3:5.8.5-57.el4.src", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-57.el4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.src as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-57.el4.src" }, "product_reference": "perl-3:5.8.5-57.el4.src", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-57.el4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-57.el4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-57.el4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-57.el4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-57.el4.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.src", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", "product_id": "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Client-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.ia64", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.ppc", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.s390x", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.src as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.src", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.i386", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "relates_to_product_reference": "5Server-5.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", "product_id": "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" }, "product_reference": "perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "relates_to_product_reference": "5Server-5.7.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2010-2761", "discovery_date": "2010-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "658976" } ], "notes": [ { "category": "description", "text": "The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.", "title": "Vulnerability description" }, { "category": "summary", "text": "perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-2761" }, { "category": "external", "summary": "RHBZ#658976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=658976" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-2761", "url": "https://www.cve.org/CVERecord?id=CVE-2010-2761" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-2761", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-2761" } ], "release_date": "2010-11-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-12-08T18:56:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:1797" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting" }, { "cve": "CVE-2010-4410", "discovery_date": "2010-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "658976" } ], "notes": [ { "category": "description", "text": "CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.", "title": "Vulnerability description" }, { "category": "summary", "text": "perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2010-4410" }, { "category": "external", "summary": "RHBZ#658976", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=658976" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2010-4410", "url": "https://www.cve.org/CVERecord?id=CVE-2010-4410" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-4410", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4410" } ], "release_date": "2010-11-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-12-08T18:56:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:1797" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "perl-CGI-Simple: - hardcoded MIME boundary value for multipart content, CVE-2010-4410 - CRLF injection allowing HTTP response splitting" }, { "cve": "CVE-2011-3597", "discovery_date": "2011-10-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "743010" } ], "notes": [ { "category": "description", "text": "Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.", "title": "Vulnerability description" }, { "category": "summary", "text": "Perl Digest improper control of generation of code", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2011-3597" }, { "category": "external", "summary": "RHBZ#743010", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=743010" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2011-3597", "url": "https://www.cve.org/CVERecord?id=CVE-2011-3597" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3597", "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3597" } ], "release_date": "2011-10-02T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2011-12-08T18:56:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259", "product_ids": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2011:1797" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "4AS:perl-3:5.8.5-57.el4.i386", "4AS:perl-3:5.8.5-57.el4.ia64", "4AS:perl-3:5.8.5-57.el4.ppc", "4AS:perl-3:5.8.5-57.el4.s390", "4AS:perl-3:5.8.5-57.el4.s390x", "4AS:perl-3:5.8.5-57.el4.src", "4AS:perl-3:5.8.5-57.el4.x86_64", "4AS:perl-debuginfo-3:5.8.5-57.el4.i386", "4AS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4AS:perl-debuginfo-3:5.8.5-57.el4.ppc", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390", "4AS:perl-debuginfo-3:5.8.5-57.el4.s390x", "4AS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4AS:perl-suidperl-3:5.8.5-57.el4.i386", "4AS:perl-suidperl-3:5.8.5-57.el4.ia64", "4AS:perl-suidperl-3:5.8.5-57.el4.ppc", "4AS:perl-suidperl-3:5.8.5-57.el4.s390", "4AS:perl-suidperl-3:5.8.5-57.el4.s390x", "4AS:perl-suidperl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-3:5.8.5-57.el4.i386", "4Desktop:perl-3:5.8.5-57.el4.src", "4Desktop:perl-3:5.8.5-57.el4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.i386", "4Desktop:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-57.el4.i386", "4Desktop:perl-suidperl-3:5.8.5-57.el4.x86_64", "4ES:perl-3:5.8.5-57.el4.i386", "4ES:perl-3:5.8.5-57.el4.ia64", "4ES:perl-3:5.8.5-57.el4.src", "4ES:perl-3:5.8.5-57.el4.x86_64", "4ES:perl-debuginfo-3:5.8.5-57.el4.i386", "4ES:perl-debuginfo-3:5.8.5-57.el4.ia64", "4ES:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4ES:perl-suidperl-3:5.8.5-57.el4.i386", "4ES:perl-suidperl-3:5.8.5-57.el4.ia64", "4ES:perl-suidperl-3:5.8.5-57.el4.x86_64", "4WS:perl-3:5.8.5-57.el4.i386", "4WS:perl-3:5.8.5-57.el4.ia64", "4WS:perl-3:5.8.5-57.el4.src", "4WS:perl-3:5.8.5-57.el4.x86_64", "4WS:perl-debuginfo-3:5.8.5-57.el4.i386", "4WS:perl-debuginfo-3:5.8.5-57.el4.ia64", "4WS:perl-debuginfo-3:5.8.5-57.el4.x86_64", "4WS:perl-suidperl-3:5.8.5-57.el4.i386", "4WS:perl-suidperl-3:5.8.5-57.el4.ia64", "4WS:perl-suidperl-3:5.8.5-57.el4.x86_64", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Client-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Client-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.src", "5Server-5.7.Z:perl-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-debuginfo-4:5.8.8-32.el5_7.6.x86_64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.i386", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ia64", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.ppc", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.s390x", "5Server-5.7.Z:perl-suidperl-4:5.8.8-32.el5_7.6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Perl Digest improper control of generation of code" } ] }