CVE-2004-0377 Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end...
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activestate activeperl | All versions | No fix listed |
| larry wall perl | <= 5.8.3 | No fix listed |
References
- 20040405 iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function mailing-list patch vendor-advisory
- 20040405 [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function mailing-list
- public.activestate.com
- www.idefense.com
- VU#722414 patch third-party-advisory us-government-resource
- perl-win32stat-bo(15732) vdb-entry
- Debian Security Tracker CVE-2004-0377 vendor-advisory