The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

The remote NewStart CGSL host, running version MAIN 6.06, has perl packages installed that are affected by multiple vulnerabilities:

  - Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers     to execute arbitrary code via a large item count. (CVE-2018-6913)

  - Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted     remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an     absolute path or has .. sequences. (CVE-2007-4829)

  - The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing     a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a     different vulnerability than CVE-2005-0448 and CVE-2004-0452. (CVE-2008-2827)

  - Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a     UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression     match. (CVE-2009-3626)

  - The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers     to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers     an uninitialized pointer dereference. (CVE-2011-2728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Solaris system is missing necessary patches to address security updates :

  - The bsd_glob function in the File::Glob module for Perl     before 5.14.2 allows context-dependent attackers to     cause a denial of service (crash) via a glob expression     with the GLOB_ALTDIRFUNC flag, which triggers an     uninitialized pointer dereference. (CVE-2011-2728)

The remote host is affected by the vulnerability described in GLSA-201401-11 (Perl, Locale Maketext Perl module: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Perl and       Locale::Maketext Perl module. Please review the CVE identifiers       referenced below for details.
  Impact :

    A context-dependent attacker could possibly execute arbitrary code with       the privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update of Perl 5 fixes the following security issues :

  - fix rehash DoS [bnc#804415] [CVE-2013-1667]

  - improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]

  - fix glob denial of service [bnc#796014] [CVE-2011-2728]

  - sanitize input in Maketext.pm [bnc#797060]     [CVE-2012-6329]

  - make getgrent work with long group entries [bnc#788388]

This update of Perl 5 fixes the following security issues :

  - fix rehash DoS [bnc#804415] [CVE-2013-1667]

  - improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]

  - fix glob denial of service [bnc#796014] [CVE-2011-2728]

  - sanitize input in Maketext.pm [bnc#797060]     [CVE-2012-6329]

ID	Name	Product	Family	Severity
266244	NewStart CGSL MAIN 6.06 : perl Multiple Vulnerabilities (NS-SA-2025-0211)	Nessus	NewStart CGSL Local Security Checks	critical
80732	Oracle Solaris Third-Party Patch Update : perl-58 (cve_2011_2728_denial_of)	Nessus	Solaris Local Security Checks	medium
72033	GLSA-201401-11 : Perl, Locale Maketext Perl module: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
65249	SuSE 10 Security Update : Perl (ZYPP Patch Number 8479)	Nessus	SuSE Local Security Checks	high
65247	SuSE 11.2 Security Update : Perl (SAT Patch Number 7439)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2011-2728

high

Tenable Plugins

critical

medium

high

high

high