20020820 NOVL-2002-2963307 - PERL Handler Vulnerabilitymailing list
http://archives.neohapsis.com/archives/bugtraq/2002-08/0202.html CVE-2002-1436
Novell NetWare 5.1/6.0 - POST Arbitrary Perl Code Execution
Record summary
CVE-2002-1436 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNovell NetWare 5.1/6.0 - POST Arbitrary Perl Code ExecutionExploitDB exploitby Dan ElderNot analyzed1 file
References
5support.novell.comConfirmation
http://support.novell.com/servlet/tidfinder/2963307 netware-perl-code-execution(9916)vdb entry
http://www.iss.net/security_center/static/9916.php 5520vdb entry
http://www.securityfocus.com/bid/5520 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1436