PT-2005-1254 · Perl+1 · Perl+1

Kevin Finisterre · Published 2005-02-07 · Updated 2018-08-13 · CVE-2005-0155

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Perl version 5.8.0

Description The issue concerns the PerlIO implementation in Perl, specifically when installed with setuid support. It allows local users to create arbitrary files by utilizing the PERLIO DEBUG variable.

Recommendations For Perl version 5.8.0, consider restricting the use of the PERLIO DEBUG variable to prevent arbitrary file creation until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-0155

RHSA-2005:103

RHSA-2005:105

RHSA-2005_103

RHSA-2005_105

RHSA-2006:0605

Affected Products

Perl

Red Hat

References · 26

• 🔥 https://exploit-db.com/exploits/792 · Exploit
• 🔥 http://securityfocus.com/bid/12426 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200502-13.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0155 · Vendor Advisory
• http://fedoranews.org/updates/FEDORA--.shtml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0155 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-103.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0155 · Security Note
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-105.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0155 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:031 · Vendor Advisory
• https://redhat.com/security/data/cve/CVE-2004-0452.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404 · Note
• http://digitalmunition.com/DMA%5B2005-0131a%5D.txt · Note