Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl win32_stat函数远程缓冲区溢出漏洞
Vulnerability Description
Perl是流行的跨平台编程语言。 ActivePerl和Larry Wall's Perl包含的'win32_stat'函数缺少正确的边界缓冲区检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，可能以进程权限在系统上执行任意指令。 如果传递以反斜线符号结尾的文件名给这个'win32_stat'函数时，它拷贝数据到固定长度的缓冲区时，对字符串缺少正确的边界缓冲区检查，超长的字符串可覆盖堆栈中的控制信息，造成任意指令执行。 如果WEB包含的PERL脚本使用了这些函数，并允许用户提供路径名，就可能以WEB进程
CVSS Information
N/A
Vulnerability Type
N/A