Test ID:	1.3.6.1.4.1.25623.1.1.10.2016.0299
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2016-0299)
Summary:	The remote host is missing an update for the 'perl-XSLoader' package(s) announced via the MGASA-2016-0299 advisory.
Description:	Summary: The remote host is missing an update for the 'perl-XSLoader' package(s) announced via the MGASA-2016-0299 advisory. Vulnerability Insight: An arbitrary code execution can be achieved if loading code from untrusted current working directory despite the '.' is removed from @INC. Vulnerability is in XSLoader that uses caller() information to locate .so file to load. If malicious attacker creates directory named `(eval 1)` with malicious binary file in it, it will be loaded if the package calling XSLoader is in parent directory (CVE-2016-6185). Affected Software/OS: 'perl-XSLoader' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6185 BugTraq ID: 91685 http://www.securityfocus.com/bid/91685 Debian Security Information: DSA-3628 (Google Search) http://www.debian.org/security/2016/dsa-3628 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITYZJXQH24X2F2LAOQEQAC5KXLYJTJ76/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5RFDMASVZLFZYBB2GNTZXU6I76E4NA4V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PRIPTDA6XINBVEJXI2NGLKVEINBREHTN/ https://security.gentoo.org/glsa/201701-75 http://www.openwall.com/lists/oss-security/2016/07/07/1 http://www.openwall.com/lists/oss-security/2016/07/08/5 http://www.securitytracker.com/id/1036260 https://usn.ubuntu.com/3625-1/ https://usn.ubuntu.com/3625-2/
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.