VulnerabilityModified
CVE-2005-0156
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long…
LOW 2.1EPSS 1.31%
Does this matter?
Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.31% probability · 69th percentile
- CISA KEV
- Not listed
- Affected
- larry wall/perl · sgi/propack · ibm/aix · redhat/enterprise linux · redhat/enterprise linux desktop · redhat/fedora core · suse/suse linux · trustix/secure linux · ubuntu/ubuntu linux
- Source
- cve@mitre.org
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
- http://fedoranews.org/updates/FEDORA--.shtml
- http://marc.info/?l=bugtraq&m=110737149402683&w=2
- http://marc.info/?l=full-disclosure&m=110779721503111&w=2
- http://secunia.com/advisories/14120
- http://secunia.com/advisories/55314
- http://www.digitalmunition.com/DMA%5B2005-0131b%5D.txt
- http://www.gentoo.org/security/en/glsa/glsa-200502-13.xmlExploit, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:031
- http://www.redhat.com/support/errata/RHSA-2005-103.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-105.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/12426Patch, Vendor Advisory
- http://www.trustix.org/errata/2005/0003/Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19208
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
- http://fedoranews.org/updates/FEDORA--.shtml
- http://marc.info/?l=bugtraq&m=110737149402683&w=2
- http://marc.info/?l=full-disclosure&m=110779721503111&w=2
- http://secunia.com/advisories/14120
- http://secunia.com/advisories/55314
- http://www.digitalmunition.com/DMA%5B2005-0131b%5D.txt
- http://www.gentoo.org/security/en/glsa/glsa-200502-13.xmlExploit, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:031
- http://www.redhat.com/support/errata/RHSA-2005-103.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-105.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/12426Patch, Vendor Advisory
- http://www.trustix.org/errata/2005/0003/Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19208
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.