/ 
SOAP-Lite-0.44 UNAUTHORIZED RELEASE
Security Advisories (2)
CVE-2015-8978 (2015-07-21)

An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.

CVE-2002-1742 (2002-04-08)

Allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

Changes for version 0.44 - 2000-12-12

  • ! fixed mod_perl server to return '500 Server Error' in case of error ! fixed CGI server to work under PerlIS and PerlEx (thanks to Murray Nesbitt)
  • tested publishing API for UDDI::Lite, examples provided (thanks to Petr Janata for access to UDDI server and provided help)
  • added bidirectional TCP client/server, examples and tests provided
  • enabled de/serializer overloading on server side (in addition to client)
  • added optimization for objects-by-reference
  • added ForkingDaemon server implementation (thanks to Peter Fraenkel)
  • added SOAP::Custom::XML for XML processing, examples and tests provided
  • added SOAP::Test as simple test framework
  • added documentation for UDDI publishing API
  • redesigned examples and tests (~240 tests for now)

Documentation

SOAPsh.pl
Interactive shell for SOAP calls

Modules

SOAP::Lite
Client and server side SOAP implementation
SOAP::Test
Test framework for SOAP::Lite
SOAP::Transport::HTTP
Server/Client side HTTP support for SOAP::Lite
SOAP::Transport::LOCAL
Client side no-transport support for SOAP::Lite
SOAP::Transport::MAILTO
Client side SMTP/sendmail support for SOAP::Lite
SOAP::Transport::POP3
Server side POP3 support for SOAP::Lite
SOAP::Transport::TCP
Server/Client side TCP support for SOAP::Lite
UDDI::Lite
Library for UDDI clients in Perl

Provides

LWP::Protocol
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
My::PingPong
in lib/SOAP/Test.pm
SOAP::Client
in lib/SOAP/Lite.pm UNAUTHORIZED
SOAP::Constants
in lib/SOAP/Lite.pm
SOAP::Custom::XML::Data
in lib/SOAP/Lite.pm
SOAP::Custom::XML::Deserializer
in lib/SOAP/Lite.pm
SOAP::Data
in lib/SOAP/Lite.pm
SOAP::Deserializer
in lib/SOAP/Lite.pm
SOAP::Header
in lib/SOAP/Lite.pm
SOAP::Parser
in lib/SOAP/Lite.pm UNAUTHORIZED
SOAP::SOM
in lib/SOAP/Lite.pm
SOAP::Schema
in lib/SOAP/Lite.pm
SOAP::Schema::Deserializer
in lib/SOAP/Lite.pm
SOAP::Schema::WSDL
in lib/SOAP/Lite.pm
SOAP::Serializer
in lib/SOAP/Lite.pm UNAUTHORIZED
SOAP::Server
in lib/SOAP/Lite.pm
SOAP::Server::Object
in lib/SOAP/Lite.pm
SOAP::Server::Parameters
in lib/SOAP/Lite.pm
SOAP::Test::Server
in lib/SOAP/Test.pm
SOAP::Trace
in lib/SOAP/Lite.pm
SOAP::Transport
in lib/SOAP/Lite.pm
SOAP::Transport::HTTP::Apache
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
SOAP::Transport::HTTP::CGI
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
SOAP::Transport::HTTP::Client
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
SOAP::Transport::HTTP::Daemon
in lib/SOAP/Transport/HTTP.pm
SOAP::Transport::HTTP::Server
in lib/SOAP/Transport/HTTP.pm UNAUTHORIZED
SOAP::Transport::LOCAL::Client
in lib/SOAP/Transport/LOCAL.pm
SOAP::Transport::MAILTO::Client
in lib/SOAP/Transport/MAILTO.pm
SOAP::Transport::POP3::Server
in lib/SOAP/Transport/POP3.pm
SOAP::Transport::TCP::Client
in lib/SOAP/Transport/TCP.pm
SOAP::Transport::TCP::Server
in lib/SOAP/Transport/TCP.pm
SOAP::Utils
in lib/SOAP/Lite.pm
UDDI::Data
in lib/UDDI/Lite.pm
UDDI::Deserializer
in lib/UDDI/Lite.pm
UDDI::SOM
in lib/UDDI/Lite.pm
UDDI::Serializer
in lib/UDDI/Lite.pm

Examples

Other files