CVE-2004-2022
ActivePerl - Denial of Service and Possible Remote Code Execution via Long System Command Argument
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-2022. PoCs published by Oliver Karow.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in ActiveState Perl and Perl for cygwin by passing an overly long string to the system() function, potentially leading to arbitrary code execution.
Description
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow. NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in ActiveState Perl and Perl for cygwin by passing an overly long string to the system() function, potentially leading to arbitrary code execution.