/ 
SOAP-Lite-0.42 UNAUTHORIZED RELEASE
Security Advisories (2)
CVE-2015-8978 (2015-07-21)

An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.

CVE-2002-1742 (2002-04-08)

Allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

Changes for version 0.42 - 2000-11-14

  • added UDDI client (UDDI::Lite) with documentation
  • added M-POST functionality in HTTP::Client
  • added redirect (3??) functionality in HTTP::Client
  • added session cache for both M-POSTs and redirects
  • added conversion of all objects to o-b-r in parameters
  • changed passing envelope into method
  • allowed \x0d and \x0a in strings (will not base64 encode)
  • added die with object that lets specify complex Fault detail
  • optimized XML encoding
  • allowed function call with autodispatch
  • improved syntax for 'use SOAP::Lite'
  • added soap.tcp example for TCP server implementation
  • added tests with Microsoft implementation
  • added documentation and tests (145 for now)

Modules

SOAP::Lite
Client and server side SOAP implementation
SOAP::Transport::HTTP
Server/Client side HTTP support for SOAP::Lite
SOAP::Transport::LOCAL
Client side no-transport support for SOAP::Lite
SOAP::Transport::MAILTO
Client side SMTP/sendmail support for SOAP::Lite
SOAP::Transport::POP3
Server side POP3 support for SOAP::Lite
SOAP::Transport::TCP
Server/Client side TCP support for SOAP::Lite
UDDI::Lite
Library for UDDI clients in Perl

Provides

LWP::Protocol
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
SOAP::Client
in lib/SOAP/Lite.pm
SOAP::Constants
in lib/SOAP/Lite.pm
SOAP::Data
in lib/SOAP/Lite.pm
SOAP::Deserializer
in lib/SOAP/Lite.pm
SOAP::Header
in lib/SOAP/Lite.pm
SOAP::Parser
in lib/SOAP/Lite.pm
SOAP::SOM
in lib/SOAP/Lite.pm
SOAP::Serializer
in lib/SOAP/Lite.pm
SOAP::Server
in lib/SOAP/Lite.pm
SOAP::Server::Object
in lib/SOAP/Lite.pm
SOAP::Server::Parameters
in lib/SOAP/Lite.pm
SOAP::Trace
in lib/SOAP/Lite.pm
SOAP::Transport
in lib/SOAP/Lite.pm
SOAP::Transport::HTTP::Apache
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::CGI
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Client
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Daemon
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Server
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::LOCAL::Client
in lib/SOAP/Transport/LOCAL.pm
SOAP::Transport::MAILTO::Client
in lib/SOAP/Transport/MAILTO.pm
SOAP::Transport::POP3::Server
in lib/SOAP/Transport/POP3.pm
SOAP::Transport::TCP::Client
in lib/SOAP/Transport/TCP.pm
SOAP::Transport::TCP::Server
in lib/SOAP/Transport/TCP.pm
UDDI::Data
in lib/UDDI/Lite.pm
UDDI::Deserializer
in lib/UDDI/Lite.pm
UDDI::SOM
in lib/UDDI/Lite.pm
UDDI::Serializer
in lib/UDDI/Lite.pm

Examples

Other files