Test ID:	1.3.6.1.4.1.25623.1.0.59039
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:207 (perl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to perl announced via advisory MDKSA-2007:207. Tavis Ormandy and Will Drewry discovered a flaw in Perl's regular expression engine. Specially crafted input to a regular expression can cause Perl to improperly allocate memory, resulting in the possible execution of arbitrary code with the permissions of the user running Perl. Updated packages have been patched to prevent these issues. Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2007:207 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5116 AIX APAR: IZ10220 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220 AIX APAR: IZ10244 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html BugTraq ID: 26350 http://www.securityfocus.com/bid/26350 Bugtraq: 20071110 FLEA-2007-0063-1 perl (Google Search) http://www.securityfocus.com/archive/1/483563/100/0/threaded Bugtraq: 20071112 FLEA-2007-0069-1 perl (Google Search) http://www.securityfocus.com/archive/1/483584/100/0/threaded Bugtraq: 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/485936/100/0/threaded Bugtraq: 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/486859/100/0/threaded Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html Debian Security Information: DSA-1400 (Google Search) http://www.debian.org/security/2007/dsa-1400 http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml HPdes Security Advisory: HPSBTU02311 http://marc.info/?l=bugtraq&m=120352263023774&w=2 HPdes Security Advisory: SSRT080001 http://www.mandriva.com/security/advisories?name=MDKSA-2007:207 https://bugzilla.redhat.com/show_bug.cgi?id=323571 https://bugzilla.redhat.com/show_bug.cgi?id=378131 http://lists.vmware.com/pipermail/security-announce/2008/000002.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669 http://www.redhat.com/support/errata/RHSA-2007-0966.html http://www.redhat.com/support/errata/RHSA-2007-1011.html http://securitytracker.com/id?1018899 http://secunia.com/advisories/27479 http://secunia.com/advisories/27515 http://secunia.com/advisories/27531 http://secunia.com/advisories/27546 http://secunia.com/advisories/27548 http://secunia.com/advisories/27570 http://secunia.com/advisories/27613 http://secunia.com/advisories/27756 http://secunia.com/advisories/27936 http://secunia.com/advisories/28167 http://secunia.com/advisories/28368 http://secunia.com/advisories/28387 http://secunia.com/advisories/28993 http://secunia.com/advisories/29074 http://secunia.com/advisories/31208 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1 SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.ubuntu.com/usn/usn-552-1 http://www.vupen.com/english/advisories/2007/3724 http://www.vupen.com/english/advisories/2007/4238 http://www.vupen.com/english/advisories/2007/4255 http://www.vupen.com/english/advisories/2008/0064 http://www.vupen.com/english/advisories/2008/0641 XForce ISS Database: perl-unicode-bo(38270) https://exchange.xforce.ibmcloud.com/vulnerabilities/38270
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.