Home > Vulnerability Database > CVE-2011-1487

Mend.io Vulnerability Database

CVE-2011-1487

Date: April 11, 2011

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Language: C

Severity Score

3.5

Related Resources (20)

Url: http://www.securityfocus.com/bid/47124

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html

Url: http://openwall.com/lists/oss-security/2011/04/04/35

Url: https://access.redhat.com/security/cve/CVE-2011-1487

Url: https://bugzilla.redhat.com/show_bug.cgi?id=692844

Url: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html

Url: https://bugzilla.redhat.com/show_bug.cgi?id=692898

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2011:091

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/66528

Url: http://secunia.com/advisories/44168

Url: http://openwall.com/lists/oss-security/2011/04/01/3

Url: https://security-tracker.debian.org/tracker/CVE-2011-1487

Url: https://nvd.nist.gov/vuln/detail/CVE-2011-1487

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2011-1487

Url: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057971.html

Url: http://secunia.com/advisories/43921

Url: http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336

Url: http://perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99

Url: http://www.debian.org/security/2011/dsa-2265

Url: https://www.mend.io/vulnerability-database/CVE-2011-1487

Severity Score

3.5

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3

Base Score:	3.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	5.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2011-1487

Date: April 11, 2011

Language: C

Severity Score

Related Resources (20)

Severity Score

Weakness Type (CWE)

CVSS v3

CVSS v2

Do you need more information?