CVE-2011-2201

N/A Unknown

Published: September 14, 2011 Modified: April 29, 2026

Description

The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511

Source: secalert@redhat.com

Exploit Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html

Source: secalert@redhat.com

Exploit Patch

http://www.openwall.com/lists/oss-security/2011/06/12/3

Source: secalert@redhat.com

Exploit Patch

http://www.openwall.com/lists/oss-security/2011/06/13/13

Source: secalert@redhat.com

Exploit Patch

http://www.openwall.com/lists/oss-security/2011/06/13/5

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48167

Source: secalert@redhat.com

Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=712694

Source: secalert@redhat.com

Exploit Patch

https://rt.cpan.org/Public/Bug/Display.html?id=61792

Source: secalert@redhat.com

Exploit

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511