Vulnerability CVE-2005-4261 - CERT Civis.Net

Vulnerability Name:

CVE-2005-4261 (CCN-23380)

Assigned:

2005-12-01

Published:

2005-12-01

Updated:

2016-10-15

Summary:

Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl."
Note: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different vulnerability than CVE-2005-3962; however, there is insufficient information to be sure.

CVSS v3 Severity:

5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.8 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: BugTraq Mailing List, Thu Jun 29 2006 - 12:56:34 CDT
[security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution

Source: CCN
Type: Full-Disclosure Mailing List, Fri Oct 28 2005 - 00:32:25 CDT
Perl format string integer wrap vulnerability

Source: CONFIRM
Type: Patch
http://cpplus.info/feature_25.html

Source: MITRE
Type: CNA
CVE-2005-3962

Source: MITRE
Type: CNA
CVE-2005-4261

Source: CCN
Type: Apple Security Update 2006-007
About the security content of Security Update 2006-007

Source: CCN
Type: RHSA-2005-880
perl security update

Source: CCN
Type: RHSA-2005-881
perl security update

Source: CCN
Type: SA17802
Perl Explicit Format Parameter Index Integer Overflow Vulnerability

Source: CCN
Type: SA17975
CP+ Unspecified Perl Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
17975

Source: SECUNIA
Type: Patch, Vendor Advisory
18005

Source: CCN
Type: SA18075
Red Hat update perl

Source: CCN
Type: SA20894
HP Tru64 UNIX and HP Internet Express Perl Vulnerability

Source: CCN
Type: SA23155
Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: CCN
Type: SA31208
IPCop update for perl

Source: CCN
Type: Sun Alert ID: 102192
Integer Overflow Vulnerability in Perl May Lead to Application Crash or Code Execution

Source: CCN
Type: ASA-2006-008
perl security update (RHSA-2005-881)

Source: DEBIAN
Type: DSA-943
perl -- integer overflow

Source: CCN
Type: GLSA-200512-01
Perl: Format string errors can lead to code execution

Source: CCN
Type: IPCop Web site
IPCop 1.4.21 released

Source: CCN
Type: US-CERT VU#948385
Perl contains an integer sign error in format string processing

Source: CCN
Type: OpenPKG-SA-2005.025
Perl

Source: CCN
Type: OSVDB ID: 21345
Perl Explicit Format Parameter Index Overflow

Source: CCN
Type: OSVDB ID: 22255
OpenBSD Perl Interpreter sprintf Function Local Overflow

Source: CCN
Type: BID-15629
Perl Perl_sv_vcatpvfn Format String Integer Wrap Vulnerability

Source: BID
Type: UNKNOWN
15799

Source: CCN
Type: BID-15799
Positive Software Corporation CP+ Unspecified Perl Security Vulnerability

Source: TRUSTIX
Type: Vendor Advisory
2005-0068

Source: CCN
Type: USN-222-1
Perl vulnerability

Source: CCN
Type: USN-222-2
Perl vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2005-2828

Source: CCN
Type: IBM Internet Security Systems X-Force Database
Webmin miniserv.pl Web server component username format string

Source: XF
Type: UNKNOWN
perl-format-string-overflow(23380)

Source: SUSE
Type: SUSE-SA:2005:071
perl integer overflows

Vulnerable Configuration:

Configuration 1:

cpe:/a:positive_software:cp+:2.5:*:*:*:*:*:*:*

OR cpe:/a:positive_software:cp+:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:positive_software:cp+:2.5.2:*:*:*:*:*:*:*

OR cpe:/a:positive_software:cp+:2.5.3:*:*:*:*:*:*:*

OR cpe:/a:positive_software:cp+:2.5.4:*:*:*:*:*:*:*

OR cpe:/a:positive_software:cp+:2.5.5:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:larry_wall:perl:5.9.2:*:*:*:*:*:*:*

OR cpe:/a:larry_wall:perl:5.8.6:*:*:*:*:*:*:*

AND

cpe:/a:openpkg:openpkg:current:*:*:*:*:*:*:*

OR cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*

OR cpe:/o:debian:debian_linux:3.1:*:*:*:*:*:*:*

OR cpe:/a:mandrakesoft:mandrake_multi_network_firewall:2.0:*:*:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:sparc:*:*:*:*:*

OR cpe:/o:sun:solaris:10:*:x86:*:*:*:*:*

OR cpe:/o:suse:suse_linux:10.0:*:oss:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*

OR cpe:/a:openpkg:openpkg:2.5:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*

OR cpe:/o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.3:*:*:*:*:*:*:*

Denotes that component is vulnerable