漏洞信息详情
Perl Archive::Tar模块后置链接漏洞
- CNNVD编号:CNNVD-201806-391
- 危害等级: 高危
- CVE编号: CVE-2018-12015
- 漏洞类型: 后置链接
- 发布时间: 2018-06-08
- 威胁类型: 远程
- 更新时间: 2021-10-29
- 厂 商: canonical
- 漏洞来源: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple,Red Hat
漏洞简介
Perl是美国程序员拉里-沃尔(Larry Wall)所研发的一种免费且功能强大的跨平台编程语言。Archive::Tar module是其中的一个用于处理tar文件的模块。
Perl 5.26.2及之前版本中的Archive::Tar模块存在安全漏洞。攻击者可借助带有相同名称的符号链接和常规文件的归档文件利用该漏洞绕过目录遍历保护机制并覆盖任意文件。
漏洞公告
目前厂商暂未发布修复措施解决此安全问题,建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法:
https://www.perl.org/
参考网址
来源:CONFIRM
链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/kb/HT209600
来源:BID
链接:http://www.securityfocus.com/bid/104423
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20180927-0001/
来源:UBUNTU
链接:https://usn.ubuntu.com/3684-2/
来源:UBUNTU
链接:https://usn.ubuntu.com/3684-1/
来源:BID
链接:https://www.securityfocus.com/bid/104423
来源:CONFIRM
链接:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900834
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:2097
来源:SECTRACK
链接:http://www.securitytracker.com/id/1041048
来源:BUGTRAQ
链接:https://seclists.org/bugtraq/2019/Mar/42
来源:FULLDISC
链接:http://seclists.org/fulldisclosure/2019/Mar/49
来源:DEBIAN
链接:https://www.debian.org/security/2018/dsa-4226
来源:MISC
链接:https://www.oracle.com/security-alerts/cpujul2020.HTML
来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com
链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-au/HT209600
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:2097
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.2986/
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/77806
来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com
链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT209600
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/152222/CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-Security-Advisory-2019-3-25-2.HTML
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/153939/Red-Hat-Security-Advisory-2019-2097-01.HTML
来源:www.ibm.com
链接:http://www.ibm.com/support/docview.wss?uid=ibm10870798
受影响实体
- Canonical Ubuntu_linux:16.04:~~Lts~~~
补丁
暂无
评论