Remote exploitation of a buffer overflow in the win32_stat function of ActiveState’s ActivePerl may allow arbitrary commands to be executed. No check is made on the length of the string before the copy is made allowing long strings to overwrite control information and execution of arbitrary code possible.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33009/idefense-040504.txt
Source: https://packetstormsecurity.com/files/33009/idefense-040504.txt.html