perl vulnerability CVE-2016-1238

[ipuustin]

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1238 reported by cve-checker.

[ipuustin]

The CVSS base score is 7.3 -- high. The attack works by getting a script with elevated privileges to be run so that the working directory contains a malicious perl module. In a non-interactive system, this is difficult to accomplish, and would require practically root user to manually run scripts in vulnerable directories. The resulting modified CVSS score is 5.8 -- medium.

https://nvd.nist.gov/cvss/v3-calculator?vector=AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:X/RL:O/RC:C/CR:X/IR:X/AR:X/MAV:L/MAC:X/MPR:L/MUI:R/MS:X/MC:X/MI:X/MA:X