Vulnerability Details : CVE-2007-5116

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
Publish Date : 2007-11-07 Last Update Date : 2017-09-28

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	7.5
Confidentiality Impact	Partial (There is considerable informational disclosure.)
Integrity Impact	Partial (Modification of some system files or information is possible, but the attacker does not have control over what can be modified, or the scope of what the attacker can affect is limited.)
Availability Impact	Partial (There is reduced performance or interruptions in resource availability.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	User
Vulnerability Type(s)	Execute CodeOverflow
CWE ID	119

- Additional Vendor Supplied Data

Vendor	Impact	CVSS Score	CVSS Vector	Report Date	Publish Date
Redhat	important			2007-09-26	2007-11-05

If you are a vendor and you have additional data which can be automatically imported into our database, please contact admin @ cvedetails.com

- Related OVAL Definitions

Title	Definition Id	Family
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows contex...	oval:org.mitre.oval:def:10669	unix
CVE-2007-5116	oval:org.opensuse.security:def:20075116	unix
DSA-1400-1 perl - arbitrary code execution	oval:org.mitre.oval:def:20027	unix
ELSA-2007:0966: perl security update (Important)	oval:org.mitre.oval:def:22461	unix
RHSA-2007:0966: perl security update (Important)	oval:com.redhat.rhsa:def:20070966	unix
USN-552-1 -- perl vulnerability	oval:org.mitre.oval:def:17476	unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2007-5116

#	Product Type	Vendor	Product	Version	Edition
1	Application	Larry Wall	Perl	5.8.0		Version Details Vulnerabilities
2	Application	Larry Wall	Perl	5.8.1		Version Details Vulnerabilities
3	Application	Larry Wall	Perl	5.8.3		Version Details Vulnerabilities
4	Application	Larry Wall	Perl	5.8.4		Version Details Vulnerabilities
5	Application	Larry Wall	Perl	5.8.4.1		Version Details Vulnerabilities
6	Application	Larry Wall	Perl	5.8.4.2		Version Details Vulnerabilities
7	Application	Larry Wall	Perl	5.8.4.2.3		Version Details Vulnerabilities
8	Application	Larry Wall	Perl	5.8.4.3		Version Details Vulnerabilities
9	Application	Larry Wall	Perl	5.8.4.4		Version Details Vulnerabilities
10	Application	Larry Wall	Perl	5.8.4.5		Version Details Vulnerabilities
11	Application	Larry Wall	Perl	5.8.6		Version Details Vulnerabilities
12	Application	Mandrakesoft	Mandrake Multi Network Firewall	2.0		Version Details Vulnerabilities
13	Application	Openpkg	Openpkg	Current		Version Details Vulnerabilities
14	OS	Redhat	Enterprise Linux	1.0	Application Stack	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Larry Wall	Perl	11
Mandrakesoft	Mandrake Multi Network Firewall	1
Openpkg	Openpkg	1
Redhat	Enterprise Linux	1

- References For CVE-2007-5116

https://bugzilla.redhat.com/show_bug.cgi?id=378131

https://exchange.xforce.ibmcloud.com/vulnerabilities/38270
XF perl-unicode-bo(38270)

https://issues.rpath.com/browse/RPL-1813 CONFIRM

http://www.vupen.com/english/advisories/2008/0641
VUPEN ADV-2008-0641

https://bugzilla.redhat.com/show_bug.cgi?id=323571

http://www.vupen.com/english/advisories/2008/0064
VUPEN ADV-2008-0064

http://www.vupen.com/english/advisories/2007/4255
VUPEN ADV-2007-4255

http://www.vupen.com/english/advisories/2007/4238
VUPEN ADV-2007-4238

http://www.vupen.com/english/advisories/2007/3724
VUPEN ADV-2007-3724

http://www.vmware.com/security/advisories/VMSA-2008-0001.html CONFIRM

http://www.us-cert.gov/cas/techalerts/TA07-352A.html
CERT TA07-352A

http://www.securityfocus.com/archive/1/archive/1/485936/100/0/threaded
BUGTRAQ 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages

http://www.securityfocus.com/archive/1/archive/1/486859/100/0/threaded
BUGTRAQ 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages

http://www.securityfocus.com/bid/26350
BID 26350 Perl Unicode Regular Expression Buffer Overflow Vulnerability Release Date:2010-08-05

http://www.ubuntu.com/usn/usn-552-1
UBUNTU USN-552-1

http://www.securityfocus.com/archive/1/archive/1/483584/100/0/threaded
BUGTRAQ 20071112 FLEA-2007-0069-1 perl

http://www.securityfocus.com/archive/1/archive/1/483563/100/0/threaded
BUGTRAQ 20071110 FLEA-2007-0063-1 perl

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html
OPENPKG OpenPKG-SA-2007.023

http://www.redhat.com/support/errata/RHSA-2007-0966.html
REDHAT RHSA-2007:0966

http://www.redhat.com/support/errata/RHSA-2007-1011.html
REDHAT RHSA-2007:1011

http://www.novell.com/linux/security/advisories/2007_24_sr.html
SUSE SUSE-SR:2007:024

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244
AIXAPAR IZ10244

http://www.debian.org/security/2007/dsa-1400
DEBIAN DSA-1400

http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml
GENTOO GLSA-200711-28

http://www.ipcop.org/index.php?name=News&file=article&sid=41 CONFIRM

http://www.mandriva.com/security/advisories?name=MDKSA-2007:207
MANDRIVA MDKSA-2007:207

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220
AIXAPAR IZ10220

http://support.avaya.com/elmodocs2/security/ASA-2008-014.htm CONFIRM

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1
SUNALERT 1018985

http://securitytracker.com/id?1018899
SECTRACK 1018899

http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1
SUNALERT 31524

http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1
SUNALERT 231524

http://lists.vmware.com/pipermail/security-announce/2008/000002.html
MLIST [Security-announce] 20080107 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages

http://marc.info/?l=bugtraq&m=120352263023774&w=2
HP HPSBTU02311

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
APPLE APPLE-SA-2007-12-17

ftp://aix.software.ibm.com/aix/efixes/security/README CONFIRM

http://docs.info.apple.com/article.html?artnum=307179 CONFIRM

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)

- Metasploit Modules Related To CVE-2007-5116

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)