The suidperl and sperl program do not give up root privileges when changing UIDs back to the original users, allowing root access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| A_ux | Apple | 3.1.1 (including) | 3.1.1 (including) |
| Osf_1 | Digital | 1.3 (including) | 1.3 (including) |
| Freebsd | Freebsd | 2.0 (including) | 2.0 (including) |
| Freebsd | Freebsd | 2.0.5 (including) | 2.0.5 (including) |
| Freebsd | Freebsd | 2.1.0 (including) | 2.1.0 (including) |
| Hp-ux | Hp | 8 (including) | 8 (including) |
| Hp-ux | Hp | 9 (including) | 9 (including) |
| Hp-ux | Hp | 10 (including) | 10 (including) |
| Aix | Ibm | 3.2.5 (including) | 3.2.5 (including) |
| Aix | Ibm | 4 (including) | 4 (including) |
| Linux_kernel | Linux | 1.2.0 (including) | 1.2.0 (including) |
| Linux_kernel | Linux | 2.0 (including) | 2.0 (including) |
| Asl_ux_4800 | Nec | * | * |
| Ews-ux_v | Nec | 4.2 (including) | 4.2 (including) |
| Ews-ux_v | Nec | 4.2mp (including) | 4.2mp (including) |
| Up-ux_v | Nec | 4.2mp (including) | 4.2mp (including) |