Vulnerabilities > CVE-2011-0761 - NULL Pointer Dereference Denial Of Service vulnerability in Perl 5.10.0/5.10.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3) closedir, (4) getsockname, (5) rewinddir, (6) tell, or (7) telldir function call. Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 6 |
Exploit-Db
description | Perl 5.10 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities. CVE-2011-0761. Dos exploits for multiple platform |
id | EDB-ID:35725 |
last seen | 2016-02-04 |
modified | 2011-05-03 |
published | 2011-05-03 |
reporter | Jonathan Brossard |
source | https://www.exploit-db.com/download/35725/ |
title | Perl 5.10 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities |
Nessus
NASL family | Gentoo Local Security Checks |
NASL id | GENTOO_GLSA-201311-17.NASL |
description | The remote host is affected by the vulnerability described in GLSA-201311-17 (Perl: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : A local attacker could cause a Denial of Service condition or perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application. A context-dependent attacker could cause a Denial of Service condition. Workaround : There is no known workaround at this time. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 71119 |
published | 2013-11-29 |
reporter | This script is Copyright (C) 2013-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/71119 |
title | GLSA-201311-17 : Perl: Multiple vulnerabilities |
code |
|