Bug#629511: CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used
Jan Lieskovsky
jlieskov at redhat.com
Sun Jun 12 14:49:33 UTC 2011
Hello, Josh, Steve, vendors,
It was found that perl-Data-FormValidator, a HTML form user input
validator, used to treat certain invalid fields as valid, when the
untaint_all_constraints directive was used (default for majority of
Data-FormValidator routines). A remote attacker could use this flaw to
bypass perl Taint mode protection mechanism via specially-crafted input
provided to the HTML form.
Note: Hopefully Damyan, Mark can clarify here, if valid data from
Data-FormValidator are automatically marked as untainted for
perl Taint mode or not. If there still is perl Taint mode
protection check present, even on valid Data-FormValidator
data and it couldn't happen, that tainted data would be passed
further to the script processing, then this is not a security
issue.
References:
[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511
[2] https://rt.cpan.org/Public/Bug/Display.html?id=61792
[3] https://bugzilla.redhat.com/show_bug.cgi?id=712694
Could you allocate a CVE id for this?
Thank you & Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team
More information about the pkg-perl-maintainers
mailing list