CVE Vulnerabilities

CVE-2005-0156

Published: Feb 07, 2005 | Modified: Aug 13, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected Software

Name Vendor Start Version End Version
Perl Larry_wall 5.8.0 5.8.0
Perl Larry_wall 5.8.1 5.8.1
Perl Larry_wall 5.8.3 5.8.3
Perl Larry_wall 5.8.4 5.8.4
Perl Larry_wall 5.8.4.1 5.8.4.1
Perl Larry_wall 5.8.4.2 5.8.4.2
Perl Larry_wall 5.8.4.2.3 5.8.4.2.3
Perl Larry_wall 5.8.4.3 5.8.4.3
Perl Larry_wall 5.8.4.4 5.8.4.4
Perl Larry_wall 5.8.4.5 5.8.4.5
Propack Sgi 3.0 3.0
Red Hat Enterprise Linux 3 RedHat perl-2:5.8.0-89.10 *
Red Hat Enterprise Linux 4 RedHat perl-3:5.8.5-12.1 *
Perl Ubuntu dapper *
Perl Ubuntu devel *
Perl Ubuntu edgy *
Perl Ubuntu feisty *

References