CVE-2012-5526

Synopsis Moderate: perl security update Type/Severity Security Advisory: Moderate Topic Updated perl packages that fix multiple security issues now availablefor Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingmoderate security impact Common Vulnerability S ...

Perl programs could be made to crash or run programs if they receive specially crafted network traffic or other input ...

Debian Bug report logs - #694279 libdancer-perl: CVE-2012-5572: Cookie name CRLF injection Package: libdancer-perl; Maintainer for libdancer-perl is Debian Perl Group <pkg-perl-maintainers@listsaliothdebianorg>; Source for libdancer-perl is src:libdancer-perl (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <car ...

Debian Bug report logs - #689314 perl: segfaults when echoing a very long string [CVE-2012-5195] Package: perl; Maintainer for perl is Niko Tyni <ntyni@debianorg>; Source for perl is src:perl (PTS, buildd, popcon) Reported by: Thorsten Glaser <tg@mirbsdde> Date: Mon, 1 Oct 2012 14:12:01 UTC Severity: grave Tags: ...

Debian Bug report logs - #693420 CVE-2012-5526 CGIpm: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers Package: perl-modules; Maintainer for perl-modules is Niko Tyni <ntyni@debianorg>; Source for perl-modules is src:perl (PTS, buildd, popcon) Reported by: Salvatore Bonaccorso <carnil@debian ...

Two vulnerabilities were discovered in the implementation of the Perl programming language: CVE-2012-5195 The x operator could cause the Perl interpreter to crash if very long strings were created CVE-2012-5526 The CGI module does not properly escape LF characters in the Set-Cookie and P3P headers In addition, this update adds a ...

It was discovered that the CGI module for Perl does not filter LF characters in the Set-Cookie and P3P headers, potentially allowing attackers to inject HTTP headers For the stable distribution (squeeze), this problem has been fixed in version 349-1squeeze2 For the unstable distribution (sid), this problem has been fixed in version 361-2 We re ...

A heap overflow flaw was found in Perl If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2012-5195) A denial of service flaw was found in the way ...