The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

The remote Solaris system is missing necessary patches to address security updates :

  - The bsd_glob function in the File::Glob module for Perl     before 5.14.2 allows context-dependent attackers to     cause a denial of service (crash) via a glob expression     with the GLOB_ALTDIRFUNC flag, which triggers an     uninitialized pointer dereference. (CVE-2011-2728)

The remote host is affected by the vulnerability described in GLSA-201401-11 (Perl, Locale Maketext Perl module: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Perl and       Locale::Maketext Perl module. Please review the CVE identifiers       referenced below for details.
  Impact :

    A context-dependent attacker could possibly execute arbitrary code with       the privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update of Perl 5 fixes the following security issues :

  - fix rehash DoS [bnc#804415] [CVE-2013-1667]

  - improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]

  - fix glob denial of service [bnc#796014] [CVE-2011-2728]

  - sanitize input in Maketext.pm [bnc#797060]     [CVE-2012-6329]

  - make getgrent work with long group entries [bnc#788388]

This update of Perl 5 fixes the following security issues :

  - fix rehash DoS [bnc#804415] [CVE-2013-1667]

  - improve CGI crlf escaping [bnc#789994] [CVE-2012-5526]

  - fix glob denial of service [bnc#796014] [CVE-2011-2728]

  - sanitize input in Maketext.pm [bnc#797060]     [CVE-2012-6329]

ID	Name	Product	Family	Severity
80732	Oracle Solaris Third-Party Patch Update : perl-58 (cve_2011_2728_denial_of)	Nessus	Solaris Local Security Checks	medium
72033	GLSA-201401-11 : Perl, Locale Maketext Perl module: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
65249	SuSE 10 Security Update : Perl (ZYPP Patch Number 8479)	Nessus	SuSE Local Security Checks	high
65247	SuSE 11.2 Security Update : Perl (SAT Patch Number 7439)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2011-2728

high

Tenable Plugins

medium

high

high

high