CVE-2011-1487
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...
5.0 MediumPublic exploitFix available
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Exploit likelihood
10.6%Down 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- Updated
- 2026-11-02
EUVDEUVD-2011-1490 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
EUVD-2011-1490- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9hm-95rh-8hr5 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
GHSA-j9hm-95rh-8hr5- Updated
- 2026-11-02
OSV No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1487 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
DEBIAN-CVE-2011-1487- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perlDebian:12 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:13 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:14 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:5.0 |
before 5.10.0-19lenny4, plus listed versions 5.10.0-195.10.0-19lenny25.10.0-19lenny3 |
5.10.0-19lenny4 |
perlDebian:6.0 |
before 5.10.1-17squeeze1, plus listed versions 5.10.1-17 |
5.10.1-17squeeze1 |
perlRed Hat:enterprise_linux:6::client |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::client |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::client |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::client |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::client |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-CPANPLUSRed Hat:enterprise_linux:6::client |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::client |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::client |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::client |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::client |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::client |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::client |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::client |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::client |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::client |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::client |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::client |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::client |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::client |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::client |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::client |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::client |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::client |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::client |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::client |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::client |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::client |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::client |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::client |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::client |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::client |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::client |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::client |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::client |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::client |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::client |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::client |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::client |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::client |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::client |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::client |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::client |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::client |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::client |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::client |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::computenode |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::computenode |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::computenode |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::computenode |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::computenode |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::computenode |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::computenode |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::computenode |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::computenode |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::computenode |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::computenode |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::computenode |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::computenode |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::computenode |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::computenode |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::computenode |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::computenode |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::computenode |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::computenode |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::computenode |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::computenode |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::computenode |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::computenode |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::computenode |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::computenode |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::computenode |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::computenode |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::computenode |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::computenode |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::computenode |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::computenode |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::computenode |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::computenode |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::computenode |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::computenode |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::computenode |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::computenode |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::computenode |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::computenode |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::computenode |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::computenode |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::server |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::server |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::server |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::server |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::server |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::server |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::server |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::server |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::server |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::server |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::server |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::server |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::server |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::server |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::server |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::server |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::server |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::server |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::server |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::server |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::server |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::server |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::server |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::server |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::server |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::server |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::server |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::server |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::server |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::server |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::server |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::server |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::server |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::server |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::server |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::server |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::server |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::server |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::server |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::server |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::server |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::server |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::server |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::server |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::server |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::workstation |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::workstation |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::workstation |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::workstation |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::workstation |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::workstation |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::workstation |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::workstation |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::workstation |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::workstation |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::workstation |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::workstation |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::workstation |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::workstation |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::workstation |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::workstation |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::workstation |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::workstation |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::workstation |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::workstation |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::workstation |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::workstation |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::workstation |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::workstation |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::workstation |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::workstation |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::workstation |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::workstation |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::workstation |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::workstation |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::workstation |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::workstation |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::workstation |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::workstation |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::workstation |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::workstation |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::workstation |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::workstation |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::workstation |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::workstation |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::workstation |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass | 2011-03-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1487 is a medium vulnerability (CVSS 5.0) in Perl, published April 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in perl 5.10.1-20.
References
bugzilla.redhat.com/show_bug.cgi?id=692844
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html
secunia.com/advisories/44168
debian.org/security/2011/dsa-2265
Show 30 moreShow less
rt.perl.org/rt3/Public/Bug/Display.html?id=87336
securityfocus.com/bid/47124
openwall.com/lists/oss-security/2011/04/04/35
perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99
mandriva.com/security/advisories?name=MDVSA-2011:091
exchange.xforce.ibmcloud.com/vulnerabilities/66528
nvd.nist.gov/vuln/detail/CVE-2011-1487
github.com/advisories/GHSA-j9hm-95rh-8hr5
security-tracker.debian.org/tracker/CVE-2011-1487
access.redhat.com/errata/RHSA-2011:0558
cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.51/Changes
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0558.json
cve.org/CVERecord?id=CVE-2010-2761