HTML: EP signature verification security measure Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
HTML: EP 0.2011
Description:
--------------------------------------------------------------------------------
Bugtraq id: 59833
CVE (CAN) ID: CVE-2012-6142
 
HTML: EP is a system that embeds Perl into HTML.
 
The Spoon: Cookie of HTML: EP module 0.2011 for Perl does not correctly use the Storable: thaw function, which allows remote attackers to execute arbitrary code through specially crafted requests.
 
<* Source: vendor

Link: http://xforce.iss.net/xforce/xfdb/84199
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Perl-Spoon
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://search.cpan.org /~ HTML-EP-MSWin32/jwied/

This article permanently updates the link address: