• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Perl Unicode '\Q...\E' Quoting Construct Regular Expression Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libarchive-tar-perl_1.31-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/liba/libarchive-tar-perl/l ibarchive-tar-perl_1.31-1ubuntu0.1_all.deb


• Ubuntu libcgi-fast-perl_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/libcgi-fast-per l_5.8.8-7ubuntu3.4_all.deb


• Ubuntu libperl-dev_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl-dev_5.8.8-7 ubuntu3.4_powerpc.deb


• Ubuntu libperl5.8_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl5.8_5.8.8-7u buntu3.4_powerpc.deb


• Ubuntu perl-base_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-base_5.8.8-7ub untu3.4_powerpc.deb


• Ubuntu perl-debug_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-debug_5.8.8-7u buntu3.4_powerpc.deb


• Ubuntu perl-doc_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-doc_5.8.8-7ubu ntu3.4_all.deb


• Ubuntu perl-modules_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules_5.8.8- 7ubuntu3.4_all.deb


• Ubuntu perl-suid_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-suid_5.8.8-7ub untu3.4_powerpc.deb


• Ubuntu perl_5.8.8-7ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl_5.8.8-7ubuntu3 .4_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu libarchive-tar-perl_1.36-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/liba/libarchive-tar-perl/l ibarchive-tar-perl_1.36-1ubuntu0.1_all.deb


• Ubuntu libcgi-fast-perl_5.8.8-12ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/libcgi-fast-per l_5.8.8-12ubuntu0.3_all.deb


• Ubuntu libcgi-fast-perl_5.8.8-12ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/libcgi-fast-per l_5.8.8-12ubuntu0.4_all.deb


• Ubuntu libperl-dev_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl-dev_5.8.8-12ubuntu0.3 _lpia.deb


• Ubuntu libperl-dev_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl-dev_5.8.8-12ubuntu0.4 _lpia.deb


• Ubuntu libperl5.8_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl5.8_5.8.8-12ubuntu0.3_ lpia.deb


• Ubuntu libperl5.8_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl5.8_5.8.8-12ubuntu0.4_ lpia.deb


• Ubuntu perl-base_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-base_5.8.8-12ubuntu0.3_l pia.deb


• Ubuntu perl-base_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-base_5.8.8-12ubuntu0.4_l pia.deb


• Ubuntu perl-debug_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-debug_5.8.8-12ubuntu0.3_ lpia.deb


• Ubuntu perl-debug_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-debug_5.8.8-12ubuntu0.4_ lpia.deb


• Ubuntu perl-doc_5.8.8-12ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-doc_5.8.8-12ub untu0.3_all.deb


• Ubuntu perl-doc_5.8.8-12ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-doc_5.8.8-12ub untu0.4_all.deb


• Ubuntu perl-modules_5.8.8-12ubuntu0.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules_5.8.8- 12ubuntu0.3_all.deb


• Ubuntu perl-modules_5.8.8-12ubuntu0.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules_5.8.8- 12ubuntu0.4_all.deb


• Ubuntu perl-suid_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-suid_5.8.8-12ubuntu0.3_l pia.deb


• Ubuntu perl-suid_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-suid_5.8.8-12ubuntu0.4_l pia.deb


• Ubuntu perl_5.8.8-12ubuntu0.3_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl_5.8.8-12ubuntu0.3_lpia.d eb


• Ubuntu perl_5.8.8-12ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl_5.8.8-12ubuntu0.4_lpia.d eb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libarchive-tar-perl_1.26-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/liba/libarchive-tar-perl/l ibarchive-tar-perl_1.26-2ubuntu0.1_all.deb


• Ubuntu libcgi-fast-perl_5.8.7-10ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/libcgi-fast-per l_5.8.7-10ubuntu1.2_all.deb


• Ubuntu libperl-dev_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl-dev_5.8.7-1 0ubuntu1.2_i386.deb


• Ubuntu libperl5.8_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/libperl5.8_5.8.7-10 ubuntu1.2_i386.deb


• Ubuntu perl-base_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-base_5.8.7-10u buntu1.2_i386.deb


• Ubuntu perl-debug_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/perl-debug_5.8. 7-10ubuntu1.2_i386.deb


• Ubuntu perl-doc_5.8.7-10ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-doc_5.8.7-10ub untu1.2_all.deb


• Ubuntu perl-modules_5.8.7-10ubuntu1.2_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules_5.8.7- 10ubuntu1.2_all.deb


• Ubuntu perl-suid_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-suid_5.8.7-10u buntu1.2_i386.deb


• Ubuntu perl_5.8.7-10ubuntu1.2_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl_5.8.7-10ubuntu 1.2_i386.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu libarchive-tar-perl_1.31-1ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/liba/libarchive-tar-perl/l ibarchive-tar-perl_1.31-1ubuntu0.1_all.deb


• Ubuntu libcgi-fast-perl_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/perl/libcgi-fast-per l_5.8.8-7ubuntu3.4_all.deb


• Ubuntu libperl-dev_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl-dev_5.8.8-7ubuntu3.4_ lpia.deb


• Ubuntu libperl5.8_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/libperl5.8_5.8.8-7ubuntu3.4_l pia.deb


• Ubuntu perl-base_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-base_5.8.8-7ubuntu3.4_lp ia.deb


• Ubuntu perl-debug_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-debug_5.8.8-7ubuntu3.4_l pia.deb


• Ubuntu perl-doc_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-doc_5.8.8-7ubu ntu3.4_all.deb


• Ubuntu perl-modules_5.8.8-7ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/perl/perl-modules_5.8.8- 7ubuntu3.4_all.deb


• Ubuntu perl-suid_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl-suid_5.8.8-7ubuntu3.4_lp ia.deb


• Ubuntu perl_5.8.8-7ubuntu3.4_lpia.deb
  http://ports.ubuntu.com/pool/main/p/perl/perl_5.8.8-7ubuntu3.4_lpia.de b

Apple Mac OS X 10.4.11

• Apple SecUpd2009-001Intel.dmg
  for Intel
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_


• Apple SecUpd2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2009-001PPC.dmg
  for PPC
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_


• Apple SecUpdSrvr2009-001Univ.dmg
  Universal
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_