Home > Vulnerability Database > CVE-2011-1487

Mend.io Vulnerability Database

CVE-2011-1487

Date: April 11, 2011

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Language: C

Severity Score

5.3

Related Resources (20)

Url: http://www.securityfocus.com/bid/47124

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html

Url: http://openwall.com/lists/oss-security/2011/04/04/35

Url: https://access.redhat.com/security/cve/CVE-2011-1487

Url: https://bugzilla.redhat.com/show_bug.cgi?id=692844

Url: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=692898

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:091

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/66528

Url: http://secunia.com/advisories/44168

Url: http://openwall.com/lists/oss-security/2011/04/01/3

Url: https://security-tracker.debian.org/tracker/CVE-2011-1487

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-1487

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1487

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html

Url: http://secunia.com/advisories/43921

Url: http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336

Url: http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99

Url: http://www.debian.org/security/2011/dsa-2265

Url: https://www.mend.io/vulnerability-database/CVE-2011-1487

Severity Score

5.3

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	5.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-1487

Date: April 11, 2011

Language: C

Severity Score

Related Resources (20)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?