Skip to content
Fencer Intel
medium 5.0

CVE-2011-1487 json

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, d…

published 2011-04-11 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-1490

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
10.6%
EPSS 10.6% chance of exploitation in 30 days, percentile 95%
public exploits
1
Exploit-DB

Summary

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

Patch / fix

  • perl Debian 14, Debian 13, Debian 12 5.10.1-20

debian advisories DEBIAN-CVE-2011-1487

  • perl RHEL 6 4:5.10.1-119.el6
  • perl-CGI RHEL 6 3.51-119.el6
  • perl-core RHEL 6 5.10.1-119.el6
  • perl-CPAN RHEL 6 1.9402-119.el6
  • perl-libs RHEL 6 4:5.10.1-119.el6
  • perl-parent RHEL 6 1:0.221-119.el6
  • perl-IO-Zlib RHEL 6 1:1.09-119.el6
  • perl-IPC-Cmd RHEL 6 1:0.56-119.el6

red hat advisories RHSA-2011:0558

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2011-1487 updated cvss 2.6

perl: lc(), uc() routines are laundering tainted data

  • Red Hat Enterprise Linux Desktop (v. 6) perl 5.10.1-119.el6, perl-CGI 3.51-119.el6, perl-core 5.10.1-119.el6, perl-CPAN 1.9402-119.el6, perl-libs 5.10.1-119.el6, perl-IO-Zlib 1.09-119.el6, +37 more Red Hat Enterprise Linux HPC Node (v. 6) perl 5.10.1-119.el6, perl-CGI 3.51-119.el6, perl-core 5.10.1-119.el6, perl-CPAN 1.9402-119.el6, perl-libs 5.10.1-119.el6, perl-IO-Zlib 1.09-119.el6, +37 more Red Hat Enterprise Linux Server (v. 6) perl 5.10.1-119.el6, perl-CGI 3.51-119.el6, perl-core 5.10.1-119.el6, perl-CPAN 1.9402-119.el6, perl-libs 5.10.1-119.el6, perl-IO-Zlib 1.09-119.el6, +37 more Red Hat Enterprise Linux Workstation (v. 6) perl 5.10.1-119.el6, perl-CGI 3.51-119.el6, perl-core 5.10.1-119.el6, perl-CPAN 1.9402-119.el6, perl-libs 5.10.1-119.el6, perl-IO-Zlib 1.09-119.el6, +37 more
    fixed: vendor fix RHSA-2011:0558
  • Red Hat Enterprise Linux 4 perl Red Hat Enterprise Linux 5 perl
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-35554)
  2. Published

Exploit prediction

10.58% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • EDB-35554 Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass remote, 2011-03-30
  • openwall.com http://openwall.com/lists/oss-security/2011/04/04/35 referenced PoC, tagged "exploit" by a source, unverified
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=692898 referenced PoC, tagged "exploit" by a source, unverified
  • openwall.com http://openwall.com/lists/oss-security/2011/04/01/3 referenced PoC, tagged "exploit" by a source, unverified
  • rt.perl.org http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 referenced PoC, tagged "exploit" by a source, unverified
  • securityfocus.com http://www.securityfocus.com/bid/47124 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.