CVE-2005-0156

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected Software

Name	Vendor	Start Version	End Version
Perl	Larry_wall	5.8.0 (including)	5.8.0 (including)
Perl	Larry_wall	5.8.1 (including)	5.8.1 (including)
Perl	Larry_wall	5.8.3 (including)	5.8.3 (including)
Perl	Larry_wall	5.8.4 (including)	5.8.4 (including)
Perl	Larry_wall	5.8.4.1 (including)	5.8.4.1 (including)
Perl	Larry_wall	5.8.4.2 (including)	5.8.4.2 (including)
Perl	Larry_wall	5.8.4.2.3 (including)	5.8.4.2.3 (including)
Perl	Larry_wall	5.8.4.3 (including)	5.8.4.3 (including)
Perl	Larry_wall	5.8.4.4 (including)	5.8.4.4 (including)
Perl	Larry_wall	5.8.4.5 (including)	5.8.4.5 (including)
Propack	Sgi	3.0 (including)	3.0 (including)
Red Hat Enterprise Linux 3	RedHat	perl-2:5.8.0-89.10	*
Red Hat Enterprise Linux 4	RedHat	perl-3:5.8.5-12.1	*
Perl	Ubuntu	dapper	*
Perl	Ubuntu	devel	*
Perl	Ubuntu	edgy	*
Perl	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-0156
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References