CVE:CVE-2010-3438
CNNVD:CNNVD-201911-658
libpoe-component-irc-perl是一款事件驱动的Perl IRC客户端模块。
libpoe-component-irc-perl 6.32之前版本中存在格式化字符串错误漏洞。攻击者可通过发送特制的IRC命令利用该漏洞在系统上执行任意命令。
solution:Upgrade libpoe-component-irc-perl_project libpoe-component-irc-perl to a higher version than 6.32,and avoid the version (,6.32); Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 12,13,and avoid the version 12,13