CVE Vulnerabilities

CVE-2005-0156

Published: Feb 07, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED
root.io minimus.io echohq.com

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected Software

Name Vendor Start Version End Version
Perl Larry_wall 5.8.0 (including) 5.8.0 (including)
Perl Larry_wall 5.8.1 (including) 5.8.1 (including)
Perl Larry_wall 5.8.3 (including) 5.8.3 (including)
Perl Larry_wall 5.8.4 (including) 5.8.4 (including)
Perl Larry_wall 5.8.4.1 (including) 5.8.4.1 (including)
Perl Larry_wall 5.8.4.2 (including) 5.8.4.2 (including)
Perl Larry_wall 5.8.4.2.3 (including) 5.8.4.2.3 (including)
Perl Larry_wall 5.8.4.3 (including) 5.8.4.3 (including)
Perl Larry_wall 5.8.4.4 (including) 5.8.4.4 (including)
Perl Larry_wall 5.8.4.5 (including) 5.8.4.5 (including)
Propack Sgi 3.0 (including) 3.0 (including)
Red Hat Enterprise Linux 3 RedHat perl-2:5.8.0-89.10 *
Red Hat Enterprise Linux 4 RedHat perl-3:5.8.5-12.1 *
Perl Ubuntu dapper *
Perl Ubuntu devel *
Perl Ubuntu edgy *
Perl Ubuntu feisty *

References