{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-07-25T00:00:00", "descriptions": [{"lang": "en", "value": "(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-08-06T20:06:06", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "GLSA-201701-75", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201701-75"}, {"name": "GLSA-201812-07", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201812-07"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab"}, {"name": "1036440", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1036440"}, {"name": "DSA-3628", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2016/dsa-3628"}, {"name": "[announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E"}, {"name": "FEDORA-2016-6ec2009080", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/"}, {"name": "[perl.perl5.porters] 20160725 CVE-2016-1238: Important unsafe module load path flaw", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html"}, {"name": "FEDORA-2016-e9e5c081d4", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"}, {"name": "FEDORA-2016-dd20a4631a", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/"}, {"name": "92136", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/92136"}, {"name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://rt.perl.org/Public/Bug/Display.html?id=127834"}, {"name": "openSUSE-SU-2019:1831", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2016-1238", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-201701-75", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201701-75"}, {"name": "GLSA-201812-07", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201812-07"}, {"name": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab", "refsource": "CONFIRM", "url": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab"}, {"name": "1036440", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1036440"}, {"name": "DSA-3628", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2016/dsa-3628"}, {"name": "[announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c@%3Cannounce.apache.org%3E"}, {"name": "FEDORA-2016-6ec2009080", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/"}, {"name": "[perl.perl5.porters] 20160725 CVE-2016-1238: Important unsafe module load path flaw", "refsource": "MLIST", "url": "http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html"}, {"name": "FEDORA-2016-e9e5c081d4", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/"}, {"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731", "refsource": "CONFIRM", "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"}, {"name": "FEDORA-2016-dd20a4631a", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/"}, {"name": "92136", "refsource": "BID", "url": "http://www.securityfocus.com/bid/92136"}, {"name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html"}, {"name": "https://rt.perl.org/Public/Bug/Display.html?id=127834", "refsource": "CONFIRM", "url": "https://rt.perl.org/Public/Bug/Display.html?id=127834"}, {"name": "openSUSE-SU-2019:1831", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:48:13.656Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-201701-75", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201701-75"}, {"name": "GLSA-201812-07", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201812-07"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab"}, {"name": "1036440", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1036440"}, {"name": "DSA-3628", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2016/dsa-3628"}, {"name": "[announce] 20180916 [SECURITY] Apache SpamAssassin 3.4.2 resolves CVE-2017-15705, CVE-2016-1238, CVE-2018-11780 & CVE-2018-11781", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E"}, {"name": "FEDORA-2016-6ec2009080", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/"}, {"name": "[perl.perl5.porters] 20160725 CVE-2016-1238: Important unsafe module load path flaw", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html"}, {"name": "FEDORA-2016-e9e5c081d4", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"}, {"name": "FEDORA-2016-dd20a4631a", "tags": ["vendor-advisory", "x_refsource_FEDORA", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/"}, {"name": "92136", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/92136"}, {"name": "[debian-lts-announce] 20181113 [SECURITY] [DLA 1578-1] spamassassin security update", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://rt.perl.org/Public/Bug/Display.html?id=127834"}, {"name": "openSUSE-SU-2019:1831", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2016-1238", "datePublished": "2016-08-02T14:00:00", "dateReserved": "2015-12-27T00:00:00", "dateUpdated": "2024-08-05T22:48:13.656Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*", "matchCriteriaId": "E79AB8DD-C907-4038-A931-1A5A4CFB6A5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*", "matchCriteriaId": "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:perl:perl:1.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "BF593285-9ECF-4F81-8D0E-7048E5297A5F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:1.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "68E7AF92-F791-4F27-A996-1C688E27EB8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.000:*:*:*:*:*:*:*", "matchCriteriaId": "33BD16F3-90F9-44FA-913F-3E8832EE7FEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.000o:*:*:*:*:*:*:*", "matchCriteriaId": "9A9A905C-3DF9-4EB6-B93A-F7DFED63E2E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.001:*:*:*:*:*:*:*", "matchCriteriaId": "6A0F4D87-B780-4672-93B5-739E365E2155", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.001n:*:*:*:*:*:*:*", "matchCriteriaId": "AD2C9916-353B-4958-AF80-5477DB26F015", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.002:*:*:*:*:*:*:*", "matchCriteriaId": "C2C74D41-BC84-43C2-9C6B-0C11A61EDC1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.002_01:*:*:*:*:*:*:*", "matchCriteriaId": "4F56CD3C-542A-4441-AF33-65C084F219C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003:*:*:*:*:*:*:*", "matchCriteriaId": "7E0C7A76-FEDA-4AC4-BFAD-01015DAE751D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_01:*:*:*:*:*:*:*", "matchCriteriaId": "8950DFB0-64BF-4E4A-929F-8165A88F8C77", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_02:*:*:*:*:*:*:*", "matchCriteriaId": "C63F4167-E4D2-4633-8CDA-4E2A86E66AF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_03:*:*:*:*:*:*:*", "matchCriteriaId": "85F31F8A-5682-45D6-8E0C-E7F312F59F86", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_04:*:*:*:*:*:*:*", "matchCriteriaId": "D4EE1C93-D2C6-4F53-9862-C29E93C6D80B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_05:*:*:*:*:*:*:*", "matchCriteriaId": "E59A0DBD-B135-41A1-92C1-EABA0157839F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_07:*:*:*:*:*:*:*", "matchCriteriaId": "CB2932C3-0F88-46A4-8822-78CD5F1EBB12", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_08:*:*:*:*:*:*:*", "matchCriteriaId": "F760289E-C86E-4AC6-A4EC-DB25A141C99D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_09:*:*:*:*:*:*:*", "matchCriteriaId": "2F43A336-EDE0-445B-827F-E9544FC77552", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_10:*:*:*:*:*:*:*", "matchCriteriaId": "7749C19E-DC46-4F0B-A866-B292FA74B29C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_11:*:*:*:*:*:*:*", "matchCriteriaId": "E92CC85B-B58C-48F8-9E6C-4EF2053AC276", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_12:*:*:*:*:*:*:*", "matchCriteriaId": "818A195C-E450-4BA5-9557-A65285D79ADE", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_13:*:*:*:*:*:*:*", "matchCriteriaId": "82FEB582-2504-4E7E-A5C6-E0B6A4CC16D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_14:*:*:*:*:*:*:*", "matchCriteriaId": "8CAC694B-E397-4C15-BDBC-3D897761A9D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_15:*:*:*:*:*:*:*", "matchCriteriaId": "0039A8F5-063D-49D6-8820-6948BB50C923", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_16:*:*:*:*:*:*:*", "matchCriteriaId": "E233E9D3-B462-4DF6-B46A-7D92DF37D6D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_17:*:*:*:*:*:*:*", "matchCriteriaId": "C5F09857-DC25-40F3-9D40-1699AED6ABBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_18:*:*:*:*:*:*:*", "matchCriteriaId": "F786345C-81BB-4BA4-B84A-0AB99E92B104", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_19:*:*:*:*:*:*:*", "matchCriteriaId": "B8E22076-8DA3-40B7-BD3B-ACFBFAE79B12", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_20:*:*:*:*:*:*:*", "matchCriteriaId": "E81E679F-803B-4AFB-947A-5DB6FE40A099", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_21:*:*:*:*:*:*:*", "matchCriteriaId": "C1FDE206-0648-4758-AFBF-E1E062875485", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_22:*:*:*:*:*:*:*", "matchCriteriaId": "061B1DE8-E39E-4B87-AAB3-076CC0086913", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_23:*:*:*:*:*:*:*", "matchCriteriaId": "49A046AB-FBF7-4F69-BDA5-A38ACF7A5822", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_24:*:*:*:*:*:*:*", "matchCriteriaId": "1FFEB7B3-2A2A-40BC-9EA9-0E18E62BBDFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_25:*:*:*:*:*:*:*", "matchCriteriaId": "F81F635C-AF53-4515-8D38-0A738A0FD16E", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_26:*:*:*:*:*:*:*", "matchCriteriaId": "90FCFD46-17FC-4550-8608-4FBE7A450922", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_27:*:*:*:*:*:*:*", "matchCriteriaId": "3343A0BC-D62F-4FC5-A5BC-4FF155A566E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_28:*:*:*:*:*:*:*", "matchCriteriaId": "B0440F0B-154D-48CE-84CB-0751F2CC9EAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_90:*:*:*:*:*:*:*", "matchCriteriaId": "0539B3F5-A216-4B9A-8229-752519135153", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_91:*:*:*:*:*:*:*", "matchCriteriaId": "2CCD591B-2C36-4EED-8CC2-F7B30C786CD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_92:*:*:*:*:*:*:*", "matchCriteriaId": "DC8B22C0-B8DA-496E-B615-EA8482FC04A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_93:*:*:*:*:*:*:*", "matchCriteriaId": "B9215B20-2133-4992-928A-9EBD734A12A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_94:*:*:*:*:*:*:*", "matchCriteriaId": "27E6BE18-F346-46DF-B84C-ED5CFDC5ABE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_95:*:*:*:*:*:*:*", "matchCriteriaId": "F19F55A5-AAC9-4F7D-83F0-C91F98F6DEB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_96:*:*:*:*:*:*:*", "matchCriteriaId": "5166BC2D-E3CC-4FA9-91C3-D97948003044", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97:*:*:*:*:*:*:*", "matchCriteriaId": "C89A4BB0-4C93-40A5-87CC-84C6338DF398", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97a:*:*:*:*:*:*:*", "matchCriteriaId": "07A1FD7E-6805-4F78-B15E-955D58FBC9C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97b:*:*:*:*:*:*:*", "matchCriteriaId": "5C2D805C-D3EC-4A9E-BD80-D448A719BFAB", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97c:*:*:*:*:*:*:*", "matchCriteriaId": "9E7EB8B6-0AB4-481F-8720-C6DB61EACB58", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97d:*:*:*:*:*:*:*", "matchCriteriaId": "918B183C-AEAD-477D-871D-2582271D940A", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97e:*:*:*:*:*:*:*", "matchCriteriaId": "6B63EC1F-3311-44DD-8CCA-4D04C0F53E64", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97f:*:*:*:*:*:*:*", "matchCriteriaId": "7DABDF1C-7793-4716-A7E8-895354874AC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97g:*:*:*:*:*:*:*", "matchCriteriaId": "07D18688-D419-40FA-BBD6-C3DE46F5093C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97h:*:*:*:*:*:*:*", "matchCriteriaId": "5CE475CA-40C1-4851-A157-57BC56626B86", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97i:*:*:*:*:*:*:*", "matchCriteriaId": "580002B3-C356-45DA-8C60-B5DFACED6DF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_97j:*:*:*:*:*:*:*", "matchCriteriaId": "132AB295-0768-4927-AD64-1BB962BF406E", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_98:*:*:*:*:*:*:*", "matchCriteriaId": "58C6E5A0-45FD-4ECF-94A5-593C27051E62", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_99:*:*:*:*:*:*:*", "matchCriteriaId": "75B905E8-76E7-45C8-B761-BD608C5465DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.003_99a:*:*:*:*:*:*:*", "matchCriteriaId": "7666AD83-03A2-42D8-8D39-6377D0AB1A02", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004:*:*:*:*:*:*:*", "matchCriteriaId": "47B622FF-B240-48AE-898C-5EB0F612563F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004_01:*:*:*:*:*:*:*", "matchCriteriaId": "6B9678C4-63EF-4717-A1C2-439A6726914B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004_02:*:*:*:*:*:*:*", "matchCriteriaId": "5807630D-4939-49D1-886D-9B5B35BDE131", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004_03:*:*:*:*:*:*:*", "matchCriteriaId": "A10B1AFC-4BB0-432D-89F7-0EB1E74C99FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004_04:*:*:*:*:*:*:*", "matchCriteriaId": "13D67525-0514-4ED9-ACC7-D807225A6F7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.004_05:*:*:*:*:*:*:*", "matchCriteriaId": "B34949C7-F77A-4EC3-A757-21B7A2A44116", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.005:*:*:*:*:*:*:*", "matchCriteriaId": "1628FEAE-D96C-47C9-BF90-72506D8B9E55", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.005_01:*:*:*:*:*:*:*", "matchCriteriaId": "35728909-A140-4531-AEF6-3A11722B4648", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.005_02:*:*:*:*:*:*:*", "matchCriteriaId": "F05D8B69-C077-41B0-8E1B-5DE25C5974DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.005_03:*:*:*:*:*:*:*", "matchCriteriaId": "5B5FF9A9-5E08-47F5-81C3-94522DA40187", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.005_04:*:*:*:*:*:*:*", "matchCriteriaId": "2FA7EA98-01E5-40A9-B8A4-7768E96B46D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.6:*:*:*:*:*:*:*", "matchCriteriaId": "B3579E04-215F-4B7D-BC6B-5AA7F98715AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "BBDE0711-1423-4E75-A902-1DA04DC8C352", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "DD62DA82-0EB3-4ACA-ACC8-A1E63C031D94", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "66F27F6D-ED2A-42C4-96A0-2F6536D9DA22", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "B476B28F-8F98-4794-A915-C47AB0C2A857", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8:*:*:*:*:*:*:*", "matchCriteriaId": "0EEC7CCD-459E-41CF-B819-696AB6C9BB39", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "4932278D-A661-42D9-AA36-4233B174EF0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "70CBBC87-F6F7-45AF-9B54-95402D03C75F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "5B34EA51-64A3-483A-AF99-01358F6BE8D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "B8E0DBA5-360F-463E-A840-365168A1FCC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "5EA80F25-A108-4B65-BE25-56DE17B930EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "ECB2B6E2-890E-4B6E-833F-DF40E6D77E22", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "53F0358E-0722-48A6-A2C6-470229602089", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "A8DFDF97-EF44-448F-A5CA-021B2D64605F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "E98D2706-99B7-4153-925B-77A8CECD7CFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.9:*:*:*:*:*:*:*", "matchCriteriaId": "B10AD15E-6275-48AB-8757-FB5A735C82D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.8.9:rc1:*:*:*:*:*:*", "matchCriteriaId": "2AFF98CD-FAF3-4016-BF69-FBCAACF570B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "3DF54207-7CF6-4204-9AA2-C705865797A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "F4D37C95-2AB2-4827-A106-16D93ED21BBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "DF69341A-4D00-424E-AD0F-FA7515278770", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "60C1DB87-F7F4-4D1D-9182-5922BAC7E55C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "074987BF-A9E8-44BE-B9B8-C58C53A41EA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "EB5CFBA1-E202-4AF9-A26D-D66830C070B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*", "matchCriteriaId": "777EC860-FB16-4B15-A8BE-3EAE9FD8A99D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "9B84C088-F29F-4498-A390-187505361962", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*", "matchCriteriaId": "4D67E248-C0B8-4713-9D9A-47097885A2C7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.10.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B32436EE-DA64-41AD-B967-26C6D4973FC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.10.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "CF46E50D-AE29-49FD-884B-488D9EB879D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "77B23E85-8167-4B17-8D76-BD807067BB4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.1:*:*:*:*:*:*:*", "matchCriteriaId": "8355C16E-16D4-4A68-BFD3-125892E3FA1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.2:*:*:*:*:*:*:*", "matchCriteriaId": "85FFA753-4B14-4B52-941F-C33D41451EF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.3:*:*:*:*:*:*:*", "matchCriteriaId": "B99FD006-688D-43BB-901A-FB9192157947", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.4:*:*:*:*:*:*:*", "matchCriteriaId": "DBD582A1-DCCF-4D54-8177-45E861A0C263", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.11.5:*:*:*:*:*:*:*", "matchCriteriaId": "E5AF4FAA-A591-43FB-A9B1-FD47EF0AC622", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:*:*:*:*:*:*:*", "matchCriteriaId": "9BC3F8EA-BE60-4EAB-A9B9-DB1368B5430C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc0:*:*:*:*:*:*", "matchCriteriaId": "C0D13359-AC5F-40CB-B906-8E03526CE045", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "A5E92FB2-7C21-4F06-AE3F-562551A758AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "D213529E-33EF-43D1-A673-3C94191427D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "E6539E09-4DC5-4C53-AFF1-70D06BBA9E7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "52D8DF08-AE73-4529-B212-CA31F02A719E", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "EA054FCE-FABC-4EB5-9759-F77C6F250B44", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.1:*:*:*:*:*:*:*", "matchCriteriaId": "BB5DDFC6-4EDF-452A-B561-C9115D91FB3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.1:rc0:*:*:*:*:*:*", "matchCriteriaId": "2BCC9FF2-71D7-4873-AE3C-432EFBE642BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1DBAB61-4BFB-4664-98CF-77C617F982A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "8A7580C2-44DE-48E5-AC26-A221537C95D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.2:*:*:*:*:*:*:*", "matchCriteriaId": "54E04A5E-BE90-4A31-8C1D-09A91DD3E7DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "1A52ADD6-05DE-4A16-9745-D92CD5F46502", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.3:*:*:*:*:*:*:*", "matchCriteriaId": "CFF99954-5B94-4092-83B9-7D17EEDB30A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "38A25AC3-1C81-4234-8B7E-0D59EA1F103B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "93E670B7-6956-4A13-A2A8-F675C0B093FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.3:rc3:*:*:*:*:*:*", "matchCriteriaId": "23F1C64E-1446-409D-9F53-1C03724A10E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.4:*:*:*:*:*:*:*", "matchCriteriaId": "7A8E8FCF-4358-42D9-8C04-EBF78CC21583", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "E044E615-78CC-49BD-87D6-06710D857AB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.4:rc2:*:*:*:*:*:*", "matchCriteriaId": "8A1D2576-41C9-433A-B483-BE11A2E08B27", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.5:*:*:*:*:*:*:*", "matchCriteriaId": "EFC45A04-5E81-4938-A247-A31E826FDABA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.5:rc1:*:*:*:*:*:*", "matchCriteriaId": "74DDAB7D-1344-4C2E-B39D-05D2B9770333", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.12.5:rc2:*:*:*:*:*:*", "matchCriteriaId": "B8197E63-97EE-471C-B6A8-F2FFA9841515", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.0:*:*:*:*:*:*:*", "matchCriteriaId": "93813F8D-F22F-43E3-B894-BEB7FA6204F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.1:*:*:*:*:*:*:*", "matchCriteriaId": "B280339A-1CED-4FBD-8B3C-A48B07FE9BAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.2:*:*:*:*:*:*:*", "matchCriteriaId": "AC85766E-3A59-4711-85C9-62AC01F2A87D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.3:*:*:*:*:*:*:*", "matchCriteriaId": "1AC9AA38-4A25-4825-9EDD-E93353A8B195", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.4:*:*:*:*:*:*:*", "matchCriteriaId": "388E8952-47B7-426E-AE35-0216FD60CC8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.5:*:*:*:*:*:*:*", "matchCriteriaId": "105AB2DD-5E61-4369-8383-B7BF13B85444", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.6:*:*:*:*:*:*:*", "matchCriteriaId": "FF2F4C5C-2B56-450A-813F-254019FBB854", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.7:*:*:*:*:*:*:*", "matchCriteriaId": "226424B4-7299-4E28-BBB1-0FCC9E2602E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.8:*:*:*:*:*:*:*", "matchCriteriaId": "C16C918C-A1C4-425B-9C0C-B239B3482A77", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.9:*:*:*:*:*:*:*", "matchCriteriaId": "5393E265-60C1-43A6-9EFE-505A115053DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.10:*:*:*:*:*:*:*", "matchCriteriaId": "1DD50D93-8395-4698-A12B-D9CAAB022BF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.13.11:*:*:*:*:*:*:*", "matchCriteriaId": "04EE04B4-71DD-4A87-BA2D-79954AEF5DD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.0:*:*:*:*:*:*:*", "matchCriteriaId": "8A968B30-8456-49C2-A9B0-6CF55CB3C7B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "66BF9787-C734-43DA-B8BF-FF6D6F4E802A", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "D94BF151-572F-4C50-8E47-9B8BCDD16A77", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "5114F054-E5AF-4905-83DD-459E1D56B5DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.1:*:*:*:*:*:*:*", "matchCriteriaId": "91B91435-67DA-49E1-A37F-7839728F17BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "18CB92C4-A966-48F6-8B52-355A39A86F2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.2:*:*:*:*:*:*:*", "matchCriteriaId": "851028B9-65A4-4A4F-9C40-930B0B9A8797", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "9F8228A7-A933-470A-A72F-14B7F15C20EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.3:*:*:*:*:*:*:*", "matchCriteriaId": "F7AD4720-7A84-4D02-8DDC-1B91A08D98D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "C4D8DBCF-CB0C-4E5C-8CE0-F43A4769463C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "72589C2C-9ACC-4A48-8CCA-FD5410A51FE7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.4:*:*:*:*:*:*:*", "matchCriteriaId": "47B99644-442E-457D-A934-521E82F5DA22", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "7EE0482C-9845-4CEA-9E22-E74B6A44537D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.14.4:rc2:*:*:*:*:*:*", "matchCriteriaId": "A4B961F2-346B-4459-8363-B3C7CA6F17D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.0:*:*:*:*:*:*:*", "matchCriteriaId": "02575484-8DC7-4B4D-8CA0-2766A47CFC78", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.1:*:*:*:*:*:*:*", "matchCriteriaId": "5A3CE102-2E66-4720-A1E6-7C937245BF15", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.2:*:*:*:*:*:*:*", "matchCriteriaId": "4FE375DE-45CF-4867-BCA8-2655CA5CE06F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.3:*:*:*:*:*:*:*", "matchCriteriaId": "189AEAEA-5853-4597-BF3C-82B2942CD62B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.4:*:*:*:*:*:*:*", "matchCriteriaId": "D385CF65-BE9E-4269-A558-D67C037F3662", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.5:*:*:*:*:*:*:*", "matchCriteriaId": "ED8BF0A6-90DE-4B43-9D5B-52D1E2FDDC16", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.6:*:*:*:*:*:*:*", "matchCriteriaId": "94D93987-6891-4003-9FDA-5E0E31E6CDB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.7:*:*:*:*:*:*:*", "matchCriteriaId": "3935C006-C2D5-4568-BCA7-C949E2DF6DE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.8:*:*:*:*:*:*:*", "matchCriteriaId": "3EDE7322-68A5-4924-9612-B1D3B72809FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.15.9:*:*:*:*:*:*:*", "matchCriteriaId": "7C5044A2-8BE6-4319-B042-B64B5FACE926", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.0:*:*:*:*:*:*:*", "matchCriteriaId": "A9E3D711-A503-480F-B1EC-EC433F7DD644", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "99D451CD-5278-4501-A0D2-1419A9ACB619", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "E2B2BDE6-597D-4C7F-AE7F-3D7A64813336", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.1:*:*:*:*:*:*:*", "matchCriteriaId": "38179468-F93E-4E3C-8213-5F4A903B186A", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.2:*:*:*:*:*:*:*", "matchCriteriaId": "DAE4A28C-360F-4527-B596-7467FF10579F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.3:*:*:*:*:*:*:*", "matchCriteriaId": "45C4E830-5173-41C4-8E06-D17F0BDA8774", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.16.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "1857347B-E3A5-41BA-B6CB-1D9C2AA27BAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.0:*:*:*:*:*:*:*", "matchCriteriaId": "A7D119DB-B1C8-406E-8E2E-5BAC3BC61206", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.1:*:*:*:*:*:*:*", "matchCriteriaId": "2FA9232E-21A1-43E8-8BFB-031A2904331F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.2:*:*:*:*:*:*:*", "matchCriteriaId": "CB99136F-4B16-4C3C-84FE-8A49DC545694", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.3:*:*:*:*:*:*:*", "matchCriteriaId": "A0D9FB9B-1CEE-4360-B92C-7CE69160CF70", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.4:*:*:*:*:*:*:*", "matchCriteriaId": "532B5841-0249-4EDE-AA52-292150DEC0A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.5:*:*:*:*:*:*:*", "matchCriteriaId": "E84E6D66-D4EC-47DF-9C80-5D1F41545ADF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.6:*:*:*:*:*:*:*", "matchCriteriaId": "CB61BB5A-BE61-4BB6-9CF1-48947C780F15", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.7:*:*:*:*:*:*:*", "matchCriteriaId": "8240432C-DBFB-4977-8562-3F225BA745A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "596EA807-1994-4282-80EF-47F7C784327B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.8:*:*:*:*:*:*:*", "matchCriteriaId": "910E6121-7D96-492D-8E23-A6C87E463C65", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.9:*:*:*:*:*:*:*", "matchCriteriaId": "C7F6649D-36EF-4F8C-A831-1A03854ECF6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.10:*:*:*:*:*:*:*", "matchCriteriaId": "255CF66E-6FAA-4723-82DC-389449904ED7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.17.11:*:*:*:*:*:*:*", "matchCriteriaId": "F1D6FC93-97C7-4B17-81CF-CCDAA4C6AE9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.0:*:*:*:*:*:*:*", "matchCriteriaId": "41488C64-89AF-47DE-9B7E-E0CE4E417E69", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "2685AEF2-D96C-4571-A4D3-B95496D1ECD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "83066A81-9B80-478D-BAA2-614655272226", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "6819B0BE-16FA-4FFD-8EBB-43725162C4FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "C103F31D-1C0D-49A3-9639-E294BFCCC070", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.1:*:*:*:*:*:*:*", "matchCriteriaId": "B398B96D-0C50-4FCE-9819-BC599ECB2208", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.2:*:*:*:*:*:*:*", "matchCriteriaId": "092191BC-4135-4437-84CF-F2E8C3FC1E47", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "D731DA65-C2C1-4954-92CB-B0DD9042E247", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.2:rc2:*:*:*:*:*:*", "matchCriteriaId": "7DB4CB39-5A63-4D97-A5C3-CF61F7E171A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.2:rc3:*:*:*:*:*:*", "matchCriteriaId": "EF7EB508-710C-4064-9C94-3558C4AB43FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.2:rc4:*:*:*:*:*:*", "matchCriteriaId": "42DF1C61-82E5-4D84-A027-1CFDB4F9DD02", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.3:*:*:*:*:*:*:*", "matchCriteriaId": "C09081B7-56AC-4D30-BC39-5FC5503DAB2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "40A7771E-C770-4494-9DB2-15E7F8D15C47", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "D4C89268-1858-4F09-AF4E-5BB2CB8794CA", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.18.4:*:*:*:*:*:*:*", "matchCriteriaId": "2C5E931F-85AB-4D99-BDC4-80C666187C26", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.0:*:*:*:*:*:*:*", "matchCriteriaId": "277580B4-8F5E-43A3-A9A9-46D2D3E30BBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.1:*:*:*:*:*:*:*", "matchCriteriaId": "C745ED42-1290-4AF4-9A64-1D681DE392DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.2:*:*:*:*:*:*:*", "matchCriteriaId": "17CAEB2B-2F87-43CF-AA6D-DED035CF340C", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.3:*:*:*:*:*:*:*", "matchCriteriaId": "9CAE1166-C49F-47D2-9235-0BC6CCC92FC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.4:*:*:*:*:*:*:*", "matchCriteriaId": "1D8E733A-F9AA-4A17-89E4-F3F25732A198", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.5:*:*:*:*:*:*:*", "matchCriteriaId": "17AA261B-1CBD-4052-923C-3964B53EB740", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.6:*:*:*:*:*:*:*", "matchCriteriaId": "4B664952-4144-4D7A-B841-949ED6BE7397", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.7:*:*:*:*:*:*:*", "matchCriteriaId": "87F7FEDE-D7F4-4B73-A7A7-D65F1AFFEC41", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.8:*:*:*:*:*:*:*", "matchCriteriaId": "2C1FF482-9D80-4695-936E-0AAB3CB37072", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.9:*:*:*:*:*:*:*", "matchCriteriaId": "3FD3F63E-9A8F-4A6C-90BA-8C9D7ADE7B43", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.10:*:*:*:*:*:*:*", "matchCriteriaId": "4D2BDD85-7ABB-4E73-B2BD-F3796DF137F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.19.11:*:*:*:*:*:*:*", "matchCriteriaId": "1F82F7EA-48CE-4EDC-8C91-B1E1CA9CF213", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.0:*:*:*:*:*:*:*", "matchCriteriaId": "069761F3-ADA6-4F9A-A42D-9CBFCA3329C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "CD42D433-7822-4697-BE03-2867134DF70B", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.1:*:*:*:*:*:*:*", "matchCriteriaId": "5F67D144-A456-4A54-899A-77B15A2D6B17", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "1B6F92DD-B408-4826-9407-80E157B12839", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "63892648-AC91-41FE-8258-83FBE6BEC019", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.2:*:*:*:*:*:*:*", "matchCriteriaId": "971901BB-B633-4F51-9E36-BBA997278DA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "E5D07F59-CCBB-4372-ABFB-8C6E3509FC52", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.3:*:*:*:*:*:*:*", "matchCriteriaId": "2C0993E1-AF16-4D43-ACF1-7A1D8C1914FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "88D6873B-B718-4BA3-875F-AF2247D1DECC", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.20.3:rc2:*:*:*:*:*:*", "matchCriteriaId": "3EDCDB3E-4710-4FFD-AF24-FE3F06B75ED3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.0:*:*:*:*:*:*:*", "matchCriteriaId": "99267332-20F0-416B-8F01-ED45280BD2F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.1:*:*:*:*:*:*:*", "matchCriteriaId": "4F7AE652-51F8-4C37-B7CE-04A82202A723", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.2:*:*:*:*:*:*:*", "matchCriteriaId": "B8F82B8B-1B85-4742-8ACE-5B46DD59A39F", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.3:*:*:*:*:*:*:*", "matchCriteriaId": "9A0B035B-B17C-4A1E-ADF1-1F90F65120C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.4:*:*:*:*:*:*:*", "matchCriteriaId": "B28B883C-BB67-4775-B17A-2A01E0468350", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.5:*:*:*:*:*:*:*", "matchCriteriaId": "917BF173-034B-4085-AB67-10EA9B770E0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.6:*:*:*:*:*:*:*", "matchCriteriaId": "94C06A0B-5A3A-48B5-8E39-42F5C9CEF193", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.7:*:*:*:*:*:*:*", "matchCriteriaId": "6F242F60-5267-4B30-90E7-BAE119AE0B00", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.8:*:*:*:*:*:*:*", "matchCriteriaId": "185BCB23-EC77-41CD-A75D-25B2A351A72D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.9:*:*:*:*:*:*:*", "matchCriteriaId": "38513AFB-DB85-44C2-93CC-199A2759ACA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.10:*:*:*:*:*:*:*", "matchCriteriaId": "51F325D8-6BAC-4CDE-A6A7-9DE8E7F8E6B0", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.21.11:*:*:*:*:*:*:*", "matchCriteriaId": "E146059C-714F-4DF5-A9DA-A9672F7BA1FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.0:*:*:*:*:*:*:*", "matchCriteriaId": "88FABC18-1DEB-4732-9E0C-B0F3DE4EEAD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "9E09087D-3852-426A-A5E1-0081DFC17F91", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "DE19639C-2939-45E6-9977-930E1D68E1A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.1:*:*:*:*:*:*:*", "matchCriteriaId": "D8E31817-A94D-48DE-A81E-2417AF5FA775", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "F0DC1981-0997-4B3E-9058-611F7D0789C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "C6131602-C488-4932-8FE1-0CCA24E9F917", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.1:rc3:*:*:*:*:*:*", "matchCriteriaId": "46A8B43D-4177-4258-A2EC-DE7AEA366B31", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.1:rc4:*:*:*:*:*:*", "matchCriteriaId": "81991993-3AFC-4462-8707-1B5CD796B500", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.2:*:*:*:*:*:*:*", "matchCriteriaId": "F6F2E723-9520-4BAC-BD22-58D8042965A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "BA0E5830-4D61-43A9-AC9C-14338553EF68", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.22.3:rc1:*:*:*:*:*:*", "matchCriteriaId": "F4192D6D-5466-47B5-9733-02F95CE0AAE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:*:*:*:*:*:*:*", "matchCriteriaId": "D972BFFE-84F9-47D0-B8F2-E1817DA8732D", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "6D504C3E-EEEA-4023-89C3-FCEC0B763E76", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "19D5E676-9653-4B39-9C51-3A249724EF06", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "300C59DD-95F7-49B9-833D-3463F6F98701", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "7EB29593-0EEB-4F28-8293-6D1CC0A99887", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.0:rc5:*:*:*:*:*:*", "matchCriteriaId": "CB12C8AF-9C04-4581-895E-D684C759F657", "vulnerable": true}, {"criteria": "cpe:2.3:a:perl:perl:5.24.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "3C7CC6EC-E04C-47E3-B350-7171A7B7CD0D", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*", "matchCriteriaId": "F1E78106-58E6-4D59-990F-75DA575BFAD9", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:spamassassin:*:*:*:*:*:*:*:*", "matchCriteriaId": "3B11FE5D-8764-42A3-A534-0EBA21F550D6", "versionEndExcluding": "3.4.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory."}, {"lang": "es", "value": "(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL y (25) utils/splain.PL en Perl 5.x en versiones anteriores a 5.22.3-RC2 y 5.24 en versiones anteriores a 5.24.1 1-RC2 no elimina adecuadamente caracteres . (period) del final de la matriz de directorio incluida, lo que podr\u00eda permitir a usuarios locales obtener privilegios a trav\u00e9s de un m\u00f3dulo Troyano bajo el directorio de trabajo actual."}], "id": "CVE-2016-1238", "lastModified": "2024-11-21T02:46:00.810", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-08-02T14:59:00.130", "references": [{"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html"}, {"source": "security@debian.org", "tags": ["Issue Tracking"], "url": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3628"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html"}, {"source": "security@debian.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/92136"}, {"source": "security@debian.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036440"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"}, {"source": "security@debian.org", "url": "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E"}, {"source": "security@debian.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html"}, {"source": "security@debian.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/"}, {"source": "security@debian.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/"}, {"source": "security@debian.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/"}, {"source": "security@debian.org", "tags": ["Permissions Required"], "url": "https://rt.perl.org/Public/Bug/Display.html?id=127834"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201701-75"}, {"source": "security@debian.org", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201812-07"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking"], "url": "http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.debian.org/security/2016/dsa-3628"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/92136"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036440"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "https://rt.perl.org/Public/Bug/Display.html?id=127834"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201701-75"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201812-07"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "Red Hat would like to thank the Perl project for reporting this issue. Upstream acknowledges John Lightsey (cPanel Security Team) and Todd Rinaldo (cPanel Security Team) as the original reporters.", "bugzilla": {"description": "perl: loading of modules from current directory", "id": "1355695", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1355695"}, "csaw": false, "cvss": {"cvss_base_score": "6.2", "cvss_scoring_vector": "AV:L/AC:H/Au:N/C:C/I:C/A:C", "status": "draft"}, "cvss3": {"cvss3_base_score": "6.7", "cvss3_scoring_vector": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "details": ["(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.", "It was found that perl can load modules from the current directory if not found in the module directories, via the @INC path. A local, authenticated attacker could create a specially crafted module in a writable directory and trick a user into running a perl program from that directory; if the module is not found in previous @INC paths, it will load and execute the attacker's module."], "mitigation": {"lang": "en:us", "value": "The following examples will remove '.' from the module path :\nRHEL6 and above :\nCreate a file /usr/local/share/perl5/sitecustomize.pl containing the line \"pop @INC if $INC[-1] eq '.';\"\nRHEL5:\nCreate a perl module with the same code in a BEGIN block, and use the 'PERL5OPT=-m<module-name>' environment variable to load it before execution of a perl program."}, "name": "CVE-2016-1238", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:5", "fix_state": "Will not fix", "package_name": "perl", "product_name": "Red Hat Enterprise Linux 5"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Will not fix", "package_name": "perl", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Will not fix", "package_name": "perl", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "perl516-perl", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-perl520-perl", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-perl524-perl", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:2", "fix_state": "Will not fix", "package_name": "rh-perl524-perl-CPAN", "product_name": "Red Hat Software Collections"}], "public_date": "2016-07-25T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2016-1238\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-1238"], "threat_severity": "Moderate", "upstream_fix": "perl 5.22.3, perl 5.24.1"}