CVE-2011-1487
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...
5.0 MediumPublic exploitFix available
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Exploit likelihood
10.6%Down 2.0 points since Feb 4, 2022
What each source reports
NVD Score used
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- Updated
- 2026-11-02
EUVDEUVD-2011-1490 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
EUVD-2011-1490- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j9hm-95rh-8hr5 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x...
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
GHSA-j9hm-95rh-8hr5- Updated
- 2026-11-02
OSV No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
CVE-2011-1487- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1487 No score
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
- Record
DEBIAN-CVE-2011-1487- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perlDebian:12 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:13 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:14 |
before 5.10.1-20 | 5.10.1-20 |
perlDebian:5.0 |
before 5.10.0-19lenny4, plus listed versions 5.10.0-195.10.0-19lenny25.10.0-19lenny3 |
5.10.0-19lenny4 |
perlDebian:6.0 |
before 5.10.1-17squeeze1, plus listed versions 5.10.1-17 |
5.10.1-17squeeze1 |
perlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-CPANPLUSRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
perlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-Archive-ExtractRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.38-119.el6 | 1:0.38-119.el6 |
perl-Archive-TarRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:1.58-119.el6 | 0:1.58-119.el6 |
perl-CGIRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:3.51-119.el6 | 0:3.51-119.el6 |
perl-CPANRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:1.9402-119.el6 | 0:1.9402-119.el6 |
perl-CPANPLUSRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.88-119.el6 | 0:0.88-119.el6 |
perl-Compress-Raw-ZlibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.023-119.el6 | 0:2.023-119.el6 |
perl-Compress-ZlibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-Digest-SHARed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:5.47-119.el6 | 1:5.47-119.el6 |
perl-ExtUtils-CBuilderRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.27-119.el6 | 1:0.27-119.el6 |
perl-ExtUtils-EmbedRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:1.28-119.el6 | 0:1.28-119.el6 |
perl-ExtUtils-MakeMakerRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.55-119.el6 | 0:6.55-119.el6 |
perl-ExtUtils-ParseXSRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:2.2003.0-119.el6 | 1:2.2003.0-119.el6 |
perl-File-FetchRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.26-119.el6 | 0:0.26-119.el6 |
perl-IO-Compress-BaseRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-Compress-ZlibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.020-119.el6 | 0:2.020-119.el6 |
perl-IO-ZlibRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:1.09-119.el6 | 1:1.09-119.el6 |
perl-IPC-CmdRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.56-119.el6 | 1:0.56-119.el6 |
perl-Locale-Maketext-SimpleRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.18-119.el6 | 1:0.18-119.el6 |
perl-Log-MessageRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Log-Message-SimpleRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.04-119.el6 | 0:0.04-119.el6 |
perl-Module-BuildRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.3500-119.el6 | 1:0.3500-119.el6 |
perl-Module-CoreListRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:2.18-119.el6 | 0:2.18-119.el6 |
perl-Module-LoadRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.16-119.el6 | 1:0.16-119.el6 |
perl-Module-Load-ConditionalRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.30-119.el6 | 0:0.30-119.el6 |
perl-Module-LoadedRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Module-PluggableRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:3.90-119.el6 | 1:3.90-119.el6 |
perl-Object-AccessorRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.34-119.el6 | 1:0.34-119.el6 |
perl-Package-ConstantsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.02-119.el6 | 1:0.02-119.el6 |
perl-Params-CheckRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.26-119.el6 | 1:0.26-119.el6 |
perl-Parse-CPAN-MetaRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:1.40-119.el6 | 1:1.40-119.el6 |
perl-Pod-EscapesRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:1.04-119.el6 | 1:1.04-119.el6 |
perl-Pod-SimpleRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:3.13-119.el6 | 1:3.13-119.el6 |
perl-Term-UIRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.20-119.el6 | 0:0.20-119.el6 |
perl-Test-HarnessRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:3.17-119.el6 | 0:3.17-119.el6 |
perl-Test-SimpleRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:0.92-119.el6 | 0:0.92-119.el6 |
perl-Time-HiResRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:1.9721-119.el6 | 4:1.9721-119.el6 |
perl-Time-PieceRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:1.15-119.el6 | 0:1.15-119.el6 |
perl-coreRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:5.10.1-119.el6 | 0:5.10.1-119.el6 |
perl-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-develRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-parentRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 1:0.221-119.el6 | 1:0.221-119.el6 |
perl-suidperlRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 4:5.10.1-119.el6 | 4:5.10.1-119.el6 |
perl-versionRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 3:0.77-119.el6 | 3:0.77-119.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass | 2011-03-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1487 is a medium vulnerability (CVSS 5.0) in Perl, published April 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in perl 5.10.1-20.
References
bugzilla.redhat.com/show_bug.cgi?id=692844
lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
lists.fedoraproject.org/pipermail/package-announce/2011-April/057891.html
secunia.com/advisories/44168
debian.org/security/2011/dsa-2265
Show 30 moreShow less
rt.perl.org/rt3/Public/Bug/Display.html?id=87336
securityfocus.com/bid/47124
openwall.com/lists/oss-security/2011/04/04/35
perl5.git.perl.org/perl.git/commit/539689e74a3bcb04d29e4cd9396de91a81045b99
mandriva.com/security/advisories?name=MDVSA-2011:091
exchange.xforce.ibmcloud.com/vulnerabilities/66528
nvd.nist.gov/vuln/detail/CVE-2011-1487
github.com/advisories/GHSA-j9hm-95rh-8hr5
security-tracker.debian.org/tracker/CVE-2011-1487
access.redhat.com/errata/RHSA-2011:0558
cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.51/Changes
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0558.json
cve.org/CVERecord?id=CVE-2010-2761