ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2013.0183
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2013-0183)
Resumen:	The remote host is missing an update for the 'perl-Dancer' package(s) announced via the MGASA-2013-0183 advisory.
Descripción:	Summary: The remote host is missing an update for the 'perl-Dancer' package(s) announced via the MGASA-2013-0183 advisory. Vulnerability Insight: A security flaw was found in the way Dancer.pm, lightweight yet powerful web application framework / Perl language module, performed sanitization of values to be used for cookie() and cookies() methods. A remote attacker could use this flaw to inject arbitrary headers into responses from (Perl) applications, that use Dancer.pm (CVE-2012-5572). Affected Software/OS: 'perl-Dancer' package(s) on Mageia 2, Mageia 3. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5572 FEDORA-2013-9950 https://lists.fedoraproject.org/pipermail/package-announce/2013-June/108749.html MDVSA-2013:184 http://www.mandriva.com/security/advisories?name=MDVSA-2013:184 [oss-security] 20121126 Re: CVE Request -- Dancer.pm / perl-Dancer / libdancer-perl: Newline injection due to improper CRLF escaping in cookie() and cookies() methods (different vulnerability than CVE-2012-5526) http://www.openwall.com/lists/oss-security/2012/11/26/10 http://advisories.mageia.org/MGASA-2013-0183.html https://github.com/PerlDancer/Dancer/blob/devel/CHANGES https://github.com/PerlDancer/Dancer/issues/859
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.