int(2041)

Boletines de Vulnerabilidades


Desbordamiento de búfer en Perl

Clasificación de la vulnerabilidad

Propiedad Valor
Nivel de Confianza Oficial
Impacto Obtener acceso
Dificultad Avanzado
Requerimientos del atacante Acceso remoto sin cuenta a un servicio estandar

Información sobre el sistema

Propiedad Valor
Fabricante afectado GNU/Linux
Software afectado Perl 5.9.2, 5.8.6

Descripción

Se ha descubierto una vulnerabilidad en Perl 5.9.2 y 5.8.6. La vulnerabilidad reside en un fallo inherente al lenguaje de programación al manejar especificadores de formato en funciones de impresión con posibilidad de modificar el formato lo que podría causar un desbordamiento de entero en la función "Perl_sv_vcatpvfn" del fichero "sv.c".

Un atacante remoto podría atacar este fallo conjuntamente con bugs de formato en aplicaciones Perl para posiblemente ejecutar código arbitrario o causar una denegación de servicio mediante especificadores de formato especialmente largos.

Existe una prueba de concepto disponible.

Solución



Actualización de software

Mandriva

Mandrakelinux 10.1
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/perl-5.8.5-3.5.101mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/perl-base-5.8.5-3.5.101mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/perl-devel-5.8.5-3.5.101mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/perl-doc-5.8.5-3.5.101mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/SRPMS/perl-5.8.5-3.5.101mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/perl-5.8.5-3.5.101mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/perl-base-5.8.5-3.5.101mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/perl-devel-5.8.5-3.5.101mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/perl-doc-5.8.5-3.5.101mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/SRPMS/perl-5.8.5-3.5.101mdk.src.rpm

Corporate Server 2.1
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/2.1/RPMS/perl-5.8.0-14.6.C21mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/2.1/RPMS/perl-base-5.8.0-14.6.C21mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/2.1/RPMS/perl-devel-5.8.0-14.6.C21mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/2.1/RPMS/perl-doc-5.8.0-14.6.C21mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/2.1/SRPMS/perl-5.8.0-14.6.C21mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/2.1/RPMS/perl-5.8.0-14.6.C21mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/2.1/RPMS/perl-base-5.8.0-14.6.C21mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/2.1/RPMS/perl-devel-5.8.0-14.6.C21mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/2.1/RPMS/perl-doc-5.8.0-14.6.C21mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/2.1/SRPMS/perl-5.8.0-14.6.C21mdk.src.rpm

Corporate Server 3.0
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/perl-5.8.3-5.5.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/perl-base-5.8.3-5.5.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/perl-devel-5.8.3-5.5.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/perl-doc-5.8.3-5.5.C30mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/SRPMS/perl-5.8.3-5.5.C30mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/perl-5.8.3-5.5.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/perl-base-5.8.3-5.5.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/perl-devel-5.8.3-5.5.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/perl-doc-5.8.3-5.5.C30mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/SRPMS/perl-5.8.3-5.5.C30mdk.src.rpm

Multi Network Firewall 2.0
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/perl-5.8.3-5.5.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/perl-base-5.8.3-5.5.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/perl-devel-5.8.3-5.5.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/perl-doc-5.8.3-5.5.M20mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/SRPMS/perl-5.8.3-5.5.M20mdk.src.rpm

Mandrivalinux LE2005
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/perl-5.8.6-6.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/perl-base-5.8.6-6.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/perl-devel-5.8.6-6.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/perl-doc-5.8.6-6.2.102mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/SRPMS/perl-5.8.6-6.2.102mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/perl-5.8.6-6.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/perl-base-5.8.6-6.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/perl-devel-5.8.6-6.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/perl-doc-5.8.6-6.2.102mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/SRPMS/perl-5.8.6-6.2.102mdk.src.rpm

Mandrivalinux 2006
X86
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/perl-5.8.7-3.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/perl-base-5.8.7-3.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/perl-devel-5.8.7-3.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/perl-doc-5.8.7-3.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/RPMS/perl-suid-5.8.7-3.2.20060mdk.i586.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/2006.0/SRPMS/perl-5.8.7-3.2.20060mdk.src.rpm
X86_64
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/perl-5.8.7-3.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/perl-base-5.8.7-3.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/perl-devel-5.8.7-3.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/perl-doc-5.8.7-3.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/RPMS/perl-suid-5.8.7-3.2.20060mdk.x86_64.rpm
ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/2006.0/SRPMS/perl-5.8.7-3.2.20060mdk.src.rpm

Red Hat Linux
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
https://rhn.redhat.com/

SUSE LINUX

SUSE LINUX 10.0
x86
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/perl-5.8.7-5.3.i586.rpm
Power PC
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/perl-5.8.7-5.3.ppc.rpm
x86-64
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/perl-32bit-5.8.7-5.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/perl-5.8.7-5.3.x86_64.rpm
Sources
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/perl-5.8.7-5.3.src.rpm

SUSE LINUX 9.3
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/perl-5.8.6-5.3.i586.rpm
x86-64
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/perl-32bit-9.3-7.1.x86_64.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/perl-5.8.6-5.3.x86_64.rpm
Sources
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/perl-5.8.6-5.3.src.rpm

SUSE LINUX 9.2
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/perl-5.8.5-3.5.i586.rpm
x86-64
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/perl-32bit-9.2-200512191352.x86_64.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/perl-5.8.5-3.5.x86_64.rpm
Sources
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/perl-5.8.5-3.5.src.rpm

SUSE LINUX 9.1
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/perl-5.8.3-32.9.i586.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/i586/perl-32bit-9.1-200512180858.i586.rpm
x86-64
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/perl-5.8.3-32.9.x86_64.rpm
Sources
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/perl-5.8.3-32.9.src.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/src/perl-5.8.3-32.9.src.rpm

SuSE Linux 9.0
x86
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/perl-5.8.1-133.i586.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/i586/perl-32bit-9.0-5.i586.rpm
x86-64
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/perl-5.8.1-133.x86_64.rpm
Sources
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/src/perl-5.8.1-133.src.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/src/perl-5.8.1-133.src.rpm

OpenBSD
OpenBSD 3.7
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/007_perl.patch
OpenBSD 3.8
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/001_perl.patch

Debian

Debian Linux 3.1
Source
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3.dsc
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3.diff.gz
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4.orig.tar.gz
Architecture independent
http://security.debian.org/pool/updates/main/p/perl/libcgi-fast-perl_5.8.4-8sarge3_all.deb
http://security.debian.org/pool/updates/main/p/perl/perl-doc_5.8.4-8sarge3_all.deb
http://security.debian.org/pool/updates/main/p/perl/perl-modules_5.8.4-8sarge3_all.deb
Alpha
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_alpha.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_alpha.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_alpha.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_alpha.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_alpha.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_alpha.deb
AMD64
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_amd64.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_amd64.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_amd64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_amd64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_amd64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_amd64.deb
ARM
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_arm.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_arm.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_arm.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_arm.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_arm.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_arm.deb
Intel IA-32
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_i386.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_i386.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_i386.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_i386.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_i386.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_i386.deb
Intel IA-64
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_ia64.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_ia64.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_ia64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_ia64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_ia64.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_ia64.deb
HP Precision
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_hppa.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_hppa.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_hppa.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_hppa.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_hppa.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_hppa.deb
Motorola 680x0
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_m68k.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_m68k.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_m68k.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_m68k.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_m68k.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_m68k.deb
Big endian MIPS
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_mips.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_mips.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_mips.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_mips.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_mips.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_mips.deb
Little endian MIPS
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_mipsel.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_mipsel.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_mipsel.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_mipsel.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_mipsel.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_mipsel.deb
PowerPC
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_powerpc.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_powerpc.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_powerpc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_powerpc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_powerpc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_powerpc.deb
IBM S/390
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_s390.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_s390.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_s390.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_s390.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_s390.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_s390.deb
Sun Sparc
http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.8.4-8sarge3_sparc.deb
http://security.debian.org/pool/updates/main/p/perl/libperl5.8_5.8.4-8sarge3_sparc.deb
http://security.debian.org/pool/updates/main/p/perl/perl_5.8.4-8sarge3_sparc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-base_5.8.4-8sarge3_sparc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-debug_5.8.4-8sarge3_sparc.deb
http://security.debian.org/pool/updates/main/p/perl/perl-suid_5.8.4-8sarge3_sparc.deb

SGI
Advanced Linux Environment 3 / RPM / Patch 10258
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS
Advanced Linux Environment 3 / SRPM / Patch 10258
ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS

Sun
Solaris 10 / SPARC / patch 119985-02
Solaris 10 / x86 / patch 122082-01
http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Hewlett-Packard
HP Tru64 UNIX v 5.1B-3 Perl Patch Kit
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=PERL_V51BB26-ES-20060612
HP Internet Express v 6.5
http://h30097.www3.hp.com/internet/prod_sol.htm

Apple
Security Update 2006-007
http://www.apple.com/support/downloads/securityupdate20060071039client.html
http://www.apple.com/support/downloads/securityupdate20060071039server.html
http://www.apple.com/support/downloads/securityupdate20060071048clientintel.html
http://www.apple.com/support/downloads/securityupdate20060071048clientppc.html
http://www.apple.com/support/downloads/securityupdate20060071048serverppc.html
http://www.apple.com/support/downloads/securityupdate20060071048serveruniversal.html

Identificadores estándar

Propiedad Valor
CVE CVE-2005-3962
BID 15629

Recursos adicionales

Dyad Securiry Advisory (perl-0002)
http://www.dyadsecurity.com/perl-0002.html

Mandriva Security Advisory (MDKSA-2005:225)
http://www.mandriva.com/security/advisories?name=MDKSA-2005:225

Red Hat Security Advisory RHSA-2005:880-8
https://rhn.redhat.com/errata/RHSA-2005-880.html

SUSE Security Announcement SUSE-SA:2005:071
http://www.novell.com/linux/security/advisories/2005_71_perl.html

OpenBSD Security Advisory Jan 5, 2006
http://www.openbsd.org/security.html

Debian Security Advisory (DSA 943-1)
http://lists.debian.org/debian-security-announce/debian-security-announce-2006/msg00016.html

SGI Security Advisory (20060101-01-U)
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U.asc

Sun Alert Notification (102192)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1

HP SECURITY BULLETIN (HPSBTU02125)
http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=c00686865

Apple Security Update 2006-007 (304829)
http://docs.info.apple.com/article.html?artnum=304829

Histórico de versiones

Versión Comentario Fecha
1.0 Aviso emitido 2005-12-13
1.1 Aviso emitido por Red Hat (RHSA-2005:880-8). Aviso emitido por SUSE (SUSE-SA:2005:071). 2005-12-21
1.2 Aviso emitido por OpenBSD (Jan 5, 2006). 2006-01-09
1.3 Aviso emitido por Debian (DSA 943-1) 2006-01-16
1.4 Aviso emitido por SGI (20060101-01-U) 2006-01-19
1.5 Aviso actualizado por Sun (102192) 2006-03-01
1.6 Aviso emitido por HP (HPSBTU02125) 2006-06-29
1.7 Aviso emitido por Apple (304829) 2006-12-04

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT