Vulnerabilities > CVE-2004-2286 - Integer Overflow vulnerability in Multiple Perl Implementation Duplication Operator

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

activestate

larry-wall

exploit available

NVD

Published: 2004-12-31

Updated: 2017-07-11

Summary

Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Activestate Activestate Activeperl 5.6.1 Activestate Activeperl 5.6.1.630 Activestate Activeperl 5.6.2 Activestate Activeperl 5.6.3 Activestate Activeperl 5.7.1 Activestate Activeperl 5.7.2 Activestate Activeperl 5.7.3 Activestate Activeperl 5.8 Activestate Activeperl 5.8.1 Activestate Activeperl 5.8.3	10
Application	Larry_Wall Larry Wall Perl 5.3 Larry Wall Perl 5.4 Larry Wall Perl 5.4.5 Larry Wall Perl 5.5 Larry Wall Perl 5.5.3 Larry Wall Perl 5.6 Larry Wall Perl 5.6.1 Larry Wall Perl 5.8.0 Larry Wall Perl 5.8.1 Larry Wall Perl 5.8.3	10

Exploit-Db

description	ActivePerl 5.x,Larry Wall Perl 5.x Duplication Operator Integer Overflow Vulnerability. CVE-2004-2286 . Dos exploits for multiple platform
id	EDB-ID:24130
last seen	2016-02-02
modified	2004-05-18
published	2004-05-18
reporter	Matt Murphy
source	https://www.exploit-db.com/download/24130/
title	ActivePerl 5.x / Larry Wall Perl 5.x - Duplication Operator Integer Overflow Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References