2.1

CVE-2005-0156

Exploit
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Larry Wall ≫ Perl Version 5.8.0
Larry Wall ≫ Perl Version 5.8.1
Larry Wall ≫ Perl Version 5.8.3
Larry Wall ≫ Perl Version 5.8.4
Larry Wall ≫ Perl Version 5.8.4.1
Larry Wall ≫ Perl Version 5.8.4.2
Larry Wall ≫ Perl Version 5.8.4.2.3
Larry Wall ≫ Perl Version 5.8.4.3
Larry Wall ≫ Perl Version 5.8.4.4
Larry Wall ≫ Perl Version 5.8.4.5
Sgi ≫ Propack Version 3.0
Ibm ≫ Aix Version 5.2
Ibm ≫ Aix Version 5.3
Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server
Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server
Redhat ≫ Fedora Core Version core_3.0
Suse ≫ Suse Linux Version 8.0
Suse ≫ Suse Linux Version 8.0 Edition i386
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1
Suse ≫ Suse Linux Version 9.2
Trustix ≫ Secure Linux Version 1.5
Trustix ≫ Secure Linux Version 2.0
Trustix ≫ Secure Linux Version 2.1
Trustix ≫ Secure Linux Version 2.2
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ia64
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ppc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.32% 0.67
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.trustix.org/errata/2005/0003/
Patch
Vendor Advisory
http://fedoranews.org/updates/FEDORA--.shtml
http://secunia.com/advisories/55314
http://www.redhat.com/support/errata/RHSA-2005-103.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-105.html
Patch
Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
http://marc.info/?l=bugtraq&m=110737149402683&w=2
http://marc.info/?l=full-disclosure&m=110779721503111&w=2
http://secunia.com/advisories/14120
http://www.digitalmunition.com/DMA%5B2005-0131b%5D.txt
http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml
Vendor Advisory
Exploit
http://www.mandriva.com/security/advisories?name=MDKSA-2005:031
http://www.securityfocus.com/bid/12426
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19208
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803