CVE-2004-0377: Buffer Overflow
Buffer overflow in the win32stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0377?
CVE-2004-0377 has a high severity rating due to its ability to allow arbitrary command execution.
How do I fix CVE-2004-0377?
To fix CVE-2004-0377, upgrade ActiveState's ActivePerl to version 5.8.3 or later, or update Larry Wall's Perl to a version above 5.8.3.
Who is affected by CVE-2004-0377?
CVE-2004-0377 affects users of ActiveState's ActivePerl and versions of Perl before 5.8.3.
What type of attack does CVE-2004-0377 facilitate?
CVE-2004-0377 facilitates both local and remote attacks through buffer overflow vulnerabilities.
What is the impact of CVE-2004-0377?
The impact of CVE-2004-0377 includes the potential for attackers to execute arbitrary commands on the affected systems.