Security Advisories (1)
CVE-2008-7319 (2017-11-07)

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.

Changes for version 0.14 - 2013-10-29

  • trailing dot for unexistent host in test (Marcin Gryszkalis)
  • SCO OpenServer added
  • tests will not fail if nonexisting domain resolves
  • detect Windows ping under Cygwin (Ben Bullock)

Modules

Cross-platform Perl interface to "ping" utilities