Perl security vulnerability

Tim van der Molen tbm at home.nl
Sat Jan 7 17:57:41 PST 2006


"[A] carefully crafted format string passed to sprintf can cause a
buffer overflow. This buffer overflow can then be used by an attacker to
execute code on the machine."

A patch is available.

More information:
<http://www.perlfoundation.org/news/2005/sprintf_patch_released.html>

Regards,
Tim



More information about the lfs-security mailing list