Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
Summary: Perl integer overflow issue Product: Fedora Core Version: fc4 Platform: All OS/Version: Linux Status: NEW Severity: security Priority: normal Component: perl AssignedTo: jvdias@redhat.com ReportedBy: bressers@redhat.com QAContact: dkl@redhat.com CC: fedora-perl-devel-list@redhat.com
Perl integer overflow issue
There exists an integer overflow problem in Perl which can lead to a string format issue. If a large enough integer is supplied to a printf statement which uses the %n conversion, it may be possible to execute arbitrary code. This problem will not be easy to remotely exploit as a very poorly written script will first be needed.
http://marc.theaimsgroup.com/?l=full-disclosure&m=113342788118630&w=...
Doesn't Affec: RHEL2.1
This issue also affects FC3
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From bressers@redhat.com 2005-12-01 08:38 EST ------- Created an attachment (id=121681) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121681&action=vie...) Proposed patch
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
bressers@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|impact=low,source=fulldisclo|impact=moderate,source=fulld |sure,public=20051201,reporte|isclosure,public=20051201,re |d=20051201 |ported=20051201
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
bressers@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|Perl integer overflow issue |CVE-2005-3962 Perl integer | |overflow issue
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-01 12:22 EST ------- Created an attachment (id=121694) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121694&action=vie...) upstream patch #26240 for this issue
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
jvdias@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED
------- Additional Comments From jvdias@redhat.com 2005-12-01 12:24 EST ------- Now applying with perl-5.8.6-18 for FC-4
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
jvdias@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |MODIFIED
------- Additional Comments From jvdias@redhat.com 2005-12-01 14:29 EST ------- Fixed with perl-5.8.6-18 in FC-4; perl-5.8.7-0.8.fc5 in FC-5.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From updates@fedora.redhat.com 2005-12-01 15:09 EST -------
From User-Agent: XML-RPC
perl-5.8.6-18 has been pushed for FC4, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From updates@fedora.redhat.com 2005-12-01 18:57 EST -------
From User-Agent: XML-RPC
perl-5.8.5-18.FC3 has been pushed for FC3, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-02 14:39 EST ------- Created an attachment (id=121776) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121776&action=vie...) upstream patch #26244
Upstream revised their fix of patch #26240 :-(
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-08 14:10 EST ------- Created an attachment (id=122039) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=122039&action=vie...) Latest upstream patch for this issue
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-08 14:12 EST ------- The upstream perl maintainers have combined the above patch #26244 with other sprintf improvements to deal with Sys::Syslog security vulnerabilities, which are also the subject of CVE-2005-3912 ( CVE-2005-3962 has now been raised on this specific integer overflow issue ). It is recommended to apply upstream patches 26235 to 26240 inclusive and 26244 to solve these issues - I've attached the patches sent by Nicholas Clark, the upstream perl maintainer, to this bug.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-08 14:25 EST ------- Created an attachment (id=122040) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=122040&action=vie...) Upstream patches 26283
The complete set of upstream patches for this issue have been integrated as the official upstream patches #26283 and #26284, attached. Respinning perl packages to incorporate new upstream fixes for CVE-2005-3912 and CVE-2005-3962
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From jvdias@redhat.com 2005-12-08 14:26 EST ------- Created an attachment (id=122041) --> (https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=122041&action=vie...) Upstream patch 26284
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
------- Additional Comments From updates@fedora.redhat.com 2005-12-14 15:31 EST -------
From User-Agent: XML-RPC
perl-5.8.6-22 has been pushed for FC4, which should resolve this issue. If these problems are still present in this version, then please make note of it in this bug report.
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report.
Summary: CVE-2005-3962 Perl integer overflow issue
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174684
bugzilla@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Severity|security |normal Keywords| |Security
notting@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|MODIFIED |CLOSED Resolution| |CURRENTRELEASE Fixed In Version| |FC5
------- Additional Comments From notting@redhat.com 2006-09-21 22:19 EST ------- Closing bugs in MODIFIED state from prior Fedora releases. If this bug persists in a current Fedora release (such as Fedora Core 5 or later), please reopen and set the version appropriately.
perl-devel@lists.fedoraproject.org
-
Red Hat Bugzilla