CVE-2001-0815

Description

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.

Affected products

• activestate / activeperl5.6.1.629

Exploits & proofs of concept

• exploit-dbActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (2)by Indigo
• exploit-dbActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (3)by Sapient2003
• exploit-dbActivePerl 5.6.1 - 'perlIIS.dll' Remote Buffer Overflow (1)by Indigo

References

• MISChttp://bugs.activestate.com/show_bug.cgi?id=18062
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/7539
• MISChttp://www.securityfocus.com/bid/3526
• MAILING_LISThttp://marc.info/?l=bugtraq&m=100583978302585&w=2
• MISChttp://www.osvdb.org/678