• info
• discussion
• exploit
• solution
• references

Libdbi-perl Unspecified Insecure Temporary File Creation Vulnerability

Solution:

Please see the referenced vendor advisories for more information and fixes.


libdbi-perl libdbi-perl 1.21

• Debian libdbi-perl_1.21-2woody2_alpha.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_alpha.deb


• Debian libdbi-perl_1.21-2woody2_arm.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_arm.deb


• Debian libdbi-perl_1.21-2woody2_hppa.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_hppa.deb


• Debian libdbi-perl_1.21-2woody2_i386.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_i386.deb


• Debian libdbi-perl_1.21-2woody2_ia64.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_ia64.deb


• Debian libdbi-perl_1.21-2woody2_m68k.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_m68k.deb


• Debian libdbi-perl_1.21-2woody2_mips.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_mips.deb


• Debian libdbi-perl_1.21-2woody2_mipsel.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_mipsel.deb


• Debian libdbi-perl_1.21-2woody2_powerpc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_powerpc.deb


• Debian libdbi-perl_1.21-2woody2_s390.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_s390.deb


• Debian libdbi-perl_1.21-2woody2_sparc.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/libd/libdbi-perl/libdbi-p erl_1.21-2woody2_sparc.deb


• RedHat perl-DBI-1.21-1.1.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/perl-DBI-1.21 -1.1.legacy.i386.rpm

libdbi-perl libdbi-perl 1.28

• SuSE perl-DBI-1.28-119.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/perl-DBI-1.28-119 .i586.rpm

libdbi-perl libdbi-perl 1.30

• Mandrake perl-DBI-1.30-2.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.30-2.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php

libdbi-perl libdbi-perl 1.32

• RedHat perl-DBI-1.32-5.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/perl-DBI-1.32-5 .1.legacy.i386.rpm


• SuSE perl-DBI-1.32-59.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/perl-DBI-1.32-59. i586.rpm

libdbi-perl libdbi-perl 1.37

• RedHat perl-DBI-1.37-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/perl-DBI-1.37-1 .1.legacy.i386.rpm


• SuSE perl-DBI-1.37-66.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/perl-DBI-1.37-66. i586.rpm


• SuSE perl-DBI-1.37-66.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/perl-DBI-1.37 -66.x86_64.rpm

libdbi-perl libdbi-perl 1.38

• Mandrake perl-DBI-1.38-1.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.38-1.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.38-1.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.38-1.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.38-1.1.92mdk.amd64.rpm
  Mandrake Linux 9.2/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.38-1.1.92mdk.i586.rpm
  Mandrake Linux 9.2
  http://www.mandrakesecure.net/en/ftp.php

libdbi-perl libdbi-perl 1.40

• Mandrake perl-DBI-1.40-2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.40-2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.40-2.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.40-2.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.40-2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.40-2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.40-2.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.40-2.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.40-2.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/AMD64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.40-2.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.40-2.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.40-2.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• RedHat perl-DBI-1.40-4.1.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/perl-DBI-1.40-4 .1.legacy.i386.rpm


• RedHat Fedora perl-DBI-1.40-6.fc3.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora perl-DBI-1.40-6.fc3.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora perl-DBI-debuginfo-1.40-6.fc3.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora perl-DBI-debuginfo-1.40-6.fc3.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

libdbi-perl libdbi-perl 1.41

• SuSE perl-DBI-1.41-28.4.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/perl-DBI-1.41-28. 4.i586.rpm


• SuSE perl-DBI-1.41-28.4.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/perl-DBI-1.41 -28.4.x86_64.rpm

libdbi-perl libdbi-perl 1.42

• Ubuntu libdbi-perl_1.42-3ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libd/libdbi-perl/libdbi-pe rl_1.42-3ubuntu0.1_amd64.deb


• Ubuntu libdbi-perl_1.42-3ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libd/libdbi-perl/libdbi-pe rl_1.42-3ubuntu0.1_i386.deb


• Ubuntu libdbi-perl_1.42-3ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/libd/libdbi-perl/libdbi-pe rl_1.42-3ubuntu0.1_powerpc.deb

libdbi-perl libdbi-perl 1.43

• Mandrake perl-DBI-1.43-2.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-1.43-2.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.43-2.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-ProfileDumper-Apache-1.43-2.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.43-2.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake perl-DBI-proxy-1.43-2.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• SuSE perl-DBI-1.43-2.2.i586.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/perl-DBI-1.43-2.2 .i586.rpm


• SuSE perl-DBI-1.43-2.2.x86_64.rpm
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.2/rpm/x86_64/perl-DBI-1.43 -2.2.x86_64.rpm