CVE-2017-0373

High

Published: 23/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model before version 2.102 contains a dangerous 'use lib' line, allowing remote attackers to have an unspecified impact via a crafted Debian package file.

Risk Assessment

Attackers may exploit this vulnerability to introduce malicious code, potentially leading to system compromise and data loss.

Recommendation

It is recommended to update Config-Model to version 2.102 or later to mitigate this vulnerability.

Other vulnerabilities in Config-Model (libconfig-model-perl)

CVE-2017-0374High
In the Config-Model library before version 2.102, there is a vulnerability that allows local users to gain elevated privileges via a crafted model in the current working directory. The issue is related to the use of '.' in the INC array.

Original NVD description (English source)

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.