_is_safe in the File::Temp module for Perl does not properly handle symlinks.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl: heap buffer overflow in pp_pack.c (CVE-2018-6913)

  - Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and     application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3)     closedir, (4) getsockname, (5) rewinddir, (6) tell, or (7) telldir function call. (CVE-2011-0761)

  - _is_safe in the File::Temp module for Perl does not properly handle symlinks. (CVE-2011-4116)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl: File::Temp insecure temporary file handling (CVE-2011-4116)

  - perl: heap buffer overrun flaw may lead to arbitrary code execution (CVE-2012-5195)

  - The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-     dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with     many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.
    (CVE-2014-4330)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - perl: heap buffer overflow in pp_pack.c (CVE-2018-6913)

  - _is_safe in the File::Temp module for Perl does not properly handle symlinks. (CVE-2011-4116)

  - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other     products, allows context-dependent attackers to execute arbitrary code or cause a denial of service     (application crash) via a long digit string associated with an invalid backreference within a regular     expression. (CVE-2013-7422)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - perl: File::Temp insecure temporary file handling (CVE-2011-4116)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
199755	RHEL 6 : perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199747	RHEL 4 : perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199714	RHEL 5 : perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199711	RHEL 3 : perl (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2011-4116

high

Tenable Plugins

critical

high

critical

high