CVE-2016-2381 in Communications Billing

Summary

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

02/13/2016

Disclosure

04/08/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
108025	Oracle Communications Billing/Revenue Management Perl input validation	20	Not defined	Official fix	CVE-2016-2381
103835	Oracle Configuration Manager Installation input validation	20	Not defined	Official fix	CVE-2016-2381
81872	Perl Taint Protection input validation	20	Not defined	Official fix	CVE-2016-2381

Sources

• MITRE
• NVD
• CVE Details