PT-2005-1254 · Perl+1 · Perl+1

Kevin Finisterre · Publicado 2005-02-07 · Atualizado 2018-08-13 · CVE-2005-0155

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Perl version 5.8.0

Description The issue concerns the PerlIO implementation in Perl, specifically when installed with setuid support. It allows local users to create arbitrary files by utilizing the PERLIO DEBUG variable.

Recommendations For Perl version 5.8.0, consider restricting the use of the PERLIO DEBUG variable to prevent arbitrary file creation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-0155

RHSA-2005:103

RHSA-2005:105

RHSA-2005_103

RHSA-2005_105

RHSA-2006:0605

Produtos afetados

Perl

Red Hat

Referências · 26

• 🔥 https://exploit-db.com/exploits/792 · Exploit
• 🔥 http://securityfocus.com/bid/12426 · Exploit
• https://redhat.com/security/data/cve/CVE-2004-0452.html · Nota
• http://gentoo.org/security/en/glsa/glsa-200502-13.xml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404 · Nota
• http://digitalmunition.com/DMA%5B2005-0131a%5D.txt · Nota
• https://osv.dev/vulnerability/CVE-2005-0155 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm · Nota
• http://fedoranews.org/updates/FEDORA--.shtml · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0155 · Aviso do Fabricante
• http://secunia.com/advisories/14120 · Nota
• http://secunia.com/advisories/21646 · Nota
• http://trustix.org/errata/2005/0003 · Correção, Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-105.html · Nota
• http://redhat.com/support/errata/RHSA-2005-103.html · Aviso do Fabricante