CVE-2001-0815 Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
HighCVSS 7.5
EPSS 14.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activestate activeperl | <= 5.6.1.629 | No fix listed |
References
- bugs.activestate.com exploit vendor-advisory
- 20011115 NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability mailing-list
- 678 vdb-entry
- 3526 exploit patch vdb-entry vendor-advisory
- activeperl-perlis-filename-bo(7539) vdb-entry