vulnwire
4.6med

CVE-2005-3962

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 72%
Public exploits
0
none known

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

Exploit prediction (EPSS)

1.37% probability of exploitation in the next 30 days, higher than 72% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness

References

  • vupen.com /english/advisories/2006/4750 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • kb.cert.org /vuls/id/948385 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • osvdb.org /22255 · vdb-entry, x_refsource_OSVDB, x_transferred
  • secunia.com /advisories/17941 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2006-081.htm · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /archive/1/418333/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/438726/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • marc.info /?l=full-disclosure&m=113342788118630&w=2 · mailing-list, x_refsource_FULLDISC, x_transferred
  • vupen.com /english/advisories/2005/2688 · vdb-entry, x_refsource_VUPEN, x_transferred
  • dyadsecurity.com /perl-0002.html · x_refsource_MISC, x_transferred
  • osvdb.org /21345 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/15629 · vdb-entry, x_refsource_BID, x_transferred
  • redhat.com /support/errata/RHSA-2005-881.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • docs.info.apple.com /article.html?artnum=304829 · x_refsource_CONFIRM, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • debian.org /security/2006/dsa-943 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • openbsd.org /errata37.html#perl · vendor-advisory, x_refsource_OPENBSD, x_transferred
  • secunia.com /advisories/17993 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18075 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /archives/fedora-legacy-announce/2006-February/msg00008.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=001056 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • openpkg.org /security/OpenPKG-SA-2005.025-perl.html · vendor-advisory, x_refsource_OPENPKG, x_transferred
  • vupen.com /english/advisories/2006/0771 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/20894 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • usn.ubuntu.com /222-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • vupen.com /english/advisories/2006/2613 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/18413 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/23155 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/17762 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18187 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • trustix.org /errata/2005/0070 · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • secunia.com /advisories/18517 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18295 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • novell.com /linux/security/advisories/2005_71_perl.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/18183 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • redhat.com /support/errata/RHSA-2005-880.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • lists.apple.com /archives/security-announce/2006/Nov/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • us-cert.gov /cas/techalerts/TA06-333A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • sunsolve.sun.com /search/document.do?assetkey=1-26-102192-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
  • secunia.com /advisories/17802 · Vendor Advisory
  • secunia.com /advisories/17844 · Vendor Advisory
  • secunia.com /advisories/17952 · Vendor Advisory
  • secunia.com /advisories/19041 · Vendor Advisory
  • secunia.com /advisories/31208 · Vendor Advisory
  • gentoo.org /security/en/glsa/glsa-200512-01.xml
  • ipcop.org /index.php?name=News&file=article&sid=41
  • mandriva.com /security/advisories?name=MDKSA-2005:225
  • novell.com /linux/security/advisories/2005_29_sr.html

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.