The host is installed with Perl and is prone to security bypass vulnerability.

Successful exploitation will allow attackers to bypass security checks in perl applications that rely on TAINT mode protection functionality. Impact Level: Application

Upgrade to Perl version 5.14 or later. For updates refer to http://www.perl.org/get.html

The flaw is due to the 'uc()', 'lc()', 'lcfirst()', and 'ucfist()' functions incorrectly laundering tainted data, which can result in the unintended use of potentially malicious data after using these functions.

Perl version 5.10.x, 5.11.x, 5.12.x to 5.12.3 and 5.13.x to 5.13.11 on Windows.

• http://openwall.com/lists/oss-security/2011/04/04/35
• http://secunia.com/advisories/43921
• http://xforce.iss.net/xforce/xfdb/66528

---

Updated on 2015-03-25