Description

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.

Remediation

References

CVE-2016-6185

Related Vulnerabilities

WordPress Plugin Responsive Image Slider, Photo Gallery And Carousel Security Bypass (1.3.5)

WordPress Plugin Content Timeline Multiple SQL Injection Vulnerabilities (4.4.2)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Remote Code Execution (2.0.32)

Zope Web Application Server Other Vulnerability (CVE-2001-1227)

WordPress Plugin WP Advanced Comment Cross-Site Scripting (0.10)

Severity

High

Classification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CVE-2016-6185