/ 
SOAP-Lite-0.36
Security Advisories (3)
CVE-2015-8978 (2015-07-21)

An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.

CVE-2002-1742 (2002-04-08)

Allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

CPANSA-SOAP-Lite-2000-01 (2000-10-05)

Security problem on server side (no more details).

Changes for version 0.36 - 2000-09-24

  • fixed output parameters autobinding
  • added mod_perl server implementation
  • added recognizing all simple types mentioned in specification
  • added support for 'hex' type
  • added more documentation (twice as much as before)
  • added more tests (75 for now)

Modules

Chatbot::Eliza
SOAP::Lite
Library for SOAP clients and servers in Perl
SOAP::Transport::HTTP::Server
Server side HTTP support for SOAP::Lite for Perl

Provides

SOAP::Constants
in lib/SOAP/Lite.pm
SOAP::Data
in lib/SOAP/Lite.pm
SOAP::Deserializer
in lib/SOAP/Lite.pm
SOAP::Parser
in lib/SOAP/Lite.pm
SOAP::SOM
in lib/SOAP/Lite.pm
SOAP::Serializer
in lib/SOAP/Lite.pm
SOAP::Transport
in lib/SOAP/Lite.pm
SOAP::Transport::HTTP
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Apache
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::CGI
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Client
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Daemon
in lib/SOAP/Transport/HTTP.pm

Examples

Other files