Rapid7 Vulnerability & Exploit Database

SUSE: CVE-2016-1238: SUSE Linux Security Advisory

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

SUSE: CVE-2016-1238: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
08/02/2016
Created
07/25/2018
Added
09/06/2016
Modified
02/04/2022

Description

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

Solution(s)

  • suse-upgrade-amavisd-new
  • suse-upgrade-amavisd-new-docs
  • suse-upgrade-perl
  • suse-upgrade-perl-32bit
  • suse-upgrade-perl-archive-extract
  • suse-upgrade-perl-base
  • suse-upgrade-perl-base-32bit
  • suse-upgrade-perl-doc
  • suse-upgrade-perl-extutils-makemaker
  • suse-upgrade-perl-mail-spamassassin
  • suse-upgrade-perl-mail-spamassassin-plugin-ixhash2
  • suse-upgrade-perl-mime-charset
  • suse-upgrade-perl-module-build
  • suse-upgrade-perl-module-load-conditional
  • suse-upgrade-perl-test-simple
  • suse-upgrade-perl-x86
  • suse-upgrade-sles12-docker-image
  • suse-upgrade-sles12sp1-docker-image
  • suse-upgrade-spamassassin

References

  • SUSE-SU-2016:2246-1
  • SUSE-SU-2016:2263-1
  • SUSE-SU-2017:2699-1
  • SUSE-SU-2017:2700-1
  • SUSE-SU-2019:0505-1
  • SUSE-SU-2019:1961-1
  • SUSE-SU-2019:2011-1
  • DLA-565-1
  • DLA-584-1
  • DSA-3628
  • 92136
  • 1036440
  • GLSA-201701-75
  • GLSA-201812-07
  • CVE-2016-1238
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;