Security Advisories (2)
CVE-2015-8978 (2015-07-21)

An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.

CVE-2002-1742 (2002-04-08)

Allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

Changes for version 0.38 - 2000-10-05

  • ! fixed namespace for base64 encoding ! fixed security problem on server side, upgrade is highly recommended
  • added HTTPS/SSL support
  • added SMTP client implementation
  • added POP3 server implementation
  • added support for Basic/Digest server authentication
  • added support for header(s) on client/server side with SOAP::Header
  • added Array and SOAPStruct for interoperability with ApacheSOAP
  • added generic class for server support SOAP::Server
  • added Actor attribute
  • added more examples, documentation and tests (88 for now)

Modules

Library for SOAP clients and servers in Perl
Server/Client side HTTP support for SOAP::Lite for Perl

Provides

in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/MAILTO.pm
in lib/SOAP/Transport/MAILTO.pm
in lib/SOAP/Transport/POP3.pm
in lib/SOAP/Transport/POP3.pm