CVE ID:	CVE-2005-3962
Description:	Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.
Test IDs:	1.3.6.1.4.1.25623.1.0.56027   1.3.6.1.4.1.25623.1.0.55934   1.3.6.1.4.1.25623.1.0.56147   1.3.6.1.4.1.25623.1.0.55992   1.3.6.1.4.1.25623.1.0.55954   1.3.6.1.4.1.25623.1.0.56271   1.3.6.1.4.1.25623.1.0.55976   1.3.6.1.4.1.25623.1.0.62539   1.3.6.1.4.1.25623.1.0.56037   1.3.6.1.4.1.25623.1.0.56038   1.3.6.1.4.1.25623.1.0.56059   1.3.6.1.4.1.25623.1.0.55948   1.3.6.1.4.1.25623.1.0.55993   1.3.6.1.4.1.25623.1.0.56313   1.3.6.1.4.1.25623.1.0.56172   1.3.6.1.4.1.25623.1.0.65270   1.3.6.1.4.1.25623.1.0.55974
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3962 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 15629 http://www.securityfocus.com/bid/15629 Bugtraq: 20051201 Perl format string integer wrap vulnerability (Google Search) http://www.securityfocus.com/archive/1/418333/100/0/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html CERT/CC vulnerability note: VU#948385 http://www.kb.cert.org/vuls/id/948385 Conectiva Linux advisory: CLSA-2006:1056 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 Debian Security Information: DSA-943 (Google Search) http://www.debian.org/security/2006/dsa-943 https://www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.html http://marc.info/?l=full-disclosure&m=113342788118630&w=2 http://www.gentoo.org/security/en/glsa/glsa-200512-01.xml HPdes Security Advisory: HPSBTU02125 http://www.securityfocus.com/archive/1/438726/100/0/threaded HPdes Security Advisory: SSRT061105 http://www.securityfocus.com/archive/1/438726/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2005:225 http://www.dyadsecurity.com/perl-0002.html OpenBSD Security Advisory: [3.7] 20060105 007: SECURITY FIX: January 5, 2006 http://www.openbsd.org/errata37.html#perl http://www.openpkg.org/security/OpenPKG-SA-2005.025-perl.html http://www.osvdb.org/21345 http://www.osvdb.org/22255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074 RedHat Security Advisories: RHSA-2005:880 http://www.redhat.com/support/errata/RHSA-2005-880.html RedHat Security Advisories: RHSA-2005:881 http://www.redhat.com/support/errata/RHSA-2005-881.html http://secunia.com/advisories/17762 http://secunia.com/advisories/17802 http://secunia.com/advisories/17844 http://secunia.com/advisories/17941 http://secunia.com/advisories/17952 http://secunia.com/advisories/17993 http://secunia.com/advisories/18075 http://secunia.com/advisories/18183 http://secunia.com/advisories/18187 http://secunia.com/advisories/18295 http://secunia.com/advisories/18413 http://secunia.com/advisories/18517 http://secunia.com/advisories/19041 http://secunia.com/advisories/20894 http://secunia.com/advisories/23155 http://secunia.com/advisories/31208 SGI Security Advisory: 20060101-01-U ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1 SuSE Security Announcement: SUSE-SA:2005:071 (Google Search) http://www.novell.com/linux/security/advisories/2005_71_perl.html SuSE Security Announcement: SUSE-SR:2005:029 (Google Search) http://www.novell.com/linux/security/advisories/2005_29_sr.html http://www.trustix.org/errata/2005/0070 https://usn.ubuntu.com/222-1/ http://www.vupen.com/english/advisories/2005/2688 http://www.vupen.com/english/advisories/2006/0771 http://www.vupen.com/english/advisories/2006/2613 http://www.vupen.com/english/advisories/2006/4750