CVE-2001-0815
published 2001-12-06CVE-2001-0815: Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long…
PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
14.42%
96.2th percentile
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| activestate | activeperl | <= 5.6.1.629 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (1)
exploitdb·2001-11-15
CVE-2001-0815 ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (1)
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (1)
---
// source: https://www.securityfocus.com/bid/3526/info
ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll' to handle a '.plx' ISAPI extension.
perlIIS.dll contains a remotely exploitable buffer overflow vulnerability in handling of the URL string. It is due to an unbounded string copy operation.
All versions of ActivePerl prior to build 630 of ActivePerl 5.6.1 are believed to be vulnerable. This vulnerability requires that the option "Check that file exists" be disabled. This option is enabled by default.
Exploitation of this vulnerability may allow for remote att
Exploit-DB
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (2)
exploitdb·2001-11-15
CVE-2001-0815 ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (2)
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (2)
---
// source: https://www.securityfocus.com/bid/3526/info
ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll' to handle a '.plx' ISAPI extension.
perlIIS.dll contains a remotely exploitable buffer overflow vulnerability in handling of the URL string. It is due to an unbounded string copy operation.
All versions of ActivePerl prior to build 630 of ActivePerl 5.6.1 are believed to be vulnerable. This vulnerability requires that the option "Check that file exists" be disabled. This option is enabled by default.
Exploitation of this vulnerability may allow for remote att
Exploit-DB
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (3)
exploitdb·2001-11-15
CVE-2001-0815 ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (3)
ActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (3)
---
source: https://www.securityfocus.com/bid/3526/info
ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll' to handle a '.plx' ISAPI extension.
perlIIS.dll contains a remotely exploitable buffer overflow vulnerability in handling of the URL string. It is due to an unbounded string copy operation.
All versions of ActivePerl prior to build 630 of ActivePerl 5.6.1 are believed to be vulnerable. This vulnerability requires that the option "Check that file exists" be disabled. This option is enabled by default.
Exploitation of this vulnerability may allow for remote attack
No writeups or analysis indexed.
http://bugs.activestate.com/show_bug.cgi?id=18062http://marc.info/?l=bugtraq&m=100583978302585&w=2http://www.osvdb.org/678http://www.securityfocus.com/bid/3526https://exchange.xforce.ibmcloud.com/vulnerabilities/7539http://bugs.activestate.com/show_bug.cgi?id=18062http://marc.info/?l=bugtraq&m=100583978302585&w=2http://www.osvdb.org/678http://www.securityfocus.com/bid/3526https://exchange.xforce.ibmcloud.com/vulnerabilities/7539
2001-12-06
Published