Test ID:	1.3.6.1.4.1.25623.1.0.60922
Category:	Fedora Local Security Checks
Title:	Fedora Core 8 FEDORA-2008-3392 (perl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to perl announced via advisory FEDORA-2008-3392. ChangeLog: * Tue Apr 29 2008 Marcela Maslanova - 4:5.8.8-39 - perl-5.8.8-CVE-2008-1927.patch - buffer overflow, when using unicode characters in regexp References: [ 1 ] Bug #443928 - CVE-2008-1927 perl: double free on regular expressions with utf8 characters https://bugzilla.redhat.com/show_bug.cgi?id=443928 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update perl' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2008-3392 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1927 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html BugTraq ID: 28928 http://www.securityfocus.com/bid/28928 Bugtraq: 20090120 rPSA-2009-0011-1 perl (Google Search) http://www.securityfocus.com/archive/1/500210/100/0/threaded Debian Security Information: DSA-1556 (Google Search) http://www.debian.org/security/2008/dsa-1556 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:100 http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156 http://osvdb.org/44588 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579 http://www.redhat.com/support/errata/RHSA-2008-0522.html http://www.redhat.com/support/errata/RHSA-2008-0532.html http://www.securitytracker.com/id?1020253 http://secunia.com/advisories/29948 http://secunia.com/advisories/30025 http://secunia.com/advisories/30326 http://secunia.com/advisories/30624 http://secunia.com/advisories/31208 http://secunia.com/advisories/31328 http://secunia.com/advisories/31467 http://secunia.com/advisories/31604 http://secunia.com/advisories/31687 http://secunia.com/advisories/33314 http://secunia.com/advisories/33937 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-700-1 http://www.ubuntu.com/usn/usn-700-2 http://www.vupen.com/english/advisories/2008/2265/references http://www.vupen.com/english/advisories/2008/2361 http://www.vupen.com/english/advisories/2008/2424 http://www.vupen.com/english/advisories/2009/0422 XForce ISS Database: perl-utf8-dos(41996) https://exchange.xforce.ibmcloud.com/vulnerabilities/41996 Common Vulnerability Exposure (CVE) ID: CVE-2007-5116 AIX APAR: IZ10220 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220 AIX APAR: IZ10244 http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html BugTraq ID: 26350 http://www.securityfocus.com/bid/26350 Bugtraq: 20071110 FLEA-2007-0063-1 perl (Google Search) http://www.securityfocus.com/archive/1/483563/100/0/threaded Bugtraq: 20071112 FLEA-2007-0069-1 perl (Google Search) http://www.securityfocus.com/archive/1/483584/100/0/threaded Bugtraq: 20080108 VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/485936/100/0/threaded Bugtraq: 20080123 UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages (Google Search) http://www.securityfocus.com/archive/1/486859/100/0/threaded Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html Debian Security Information: DSA-1400 (Google Search) http://www.debian.org/security/2007/dsa-1400 http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml HPdes Security Advisory: HPSBTU02311 http://marc.info/?l=bugtraq&m=120352263023774&w=2 HPdes Security Advisory: SSRT080001 http://www.mandriva.com/security/advisories?name=MDKSA-2007:207 https://bugzilla.redhat.com/show_bug.cgi?id=323571 https://bugzilla.redhat.com/show_bug.cgi?id=378131 http://lists.vmware.com/pipermail/security-announce/2008/000002.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669 http://www.redhat.com/support/errata/RHSA-2007-0966.html http://www.redhat.com/support/errata/RHSA-2007-1011.html http://securitytracker.com/id?1018899 http://secunia.com/advisories/27479 http://secunia.com/advisories/27515 http://secunia.com/advisories/27531 http://secunia.com/advisories/27546 http://secunia.com/advisories/27548 http://secunia.com/advisories/27570 http://secunia.com/advisories/27613 http://secunia.com/advisories/27756 http://secunia.com/advisories/27936 http://secunia.com/advisories/28167 http://secunia.com/advisories/28368 http://secunia.com/advisories/28387 http://secunia.com/advisories/28993 http://secunia.com/advisories/29074 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1 SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.ubuntu.com/usn/usn-552-1 http://www.vupen.com/english/advisories/2007/3724 http://www.vupen.com/english/advisories/2007/4238 http://www.vupen.com/english/advisories/2007/4255 http://www.vupen.com/english/advisories/2008/0064 http://www.vupen.com/english/advisories/2008/0641 XForce ISS Database: perl-unicode-bo(38270) https://exchange.xforce.ibmcloud.com/vulnerabilities/38270
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.