← back
CVE-2005-0155

CVE-2005-0155

EPSS 1.2%
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/792unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056http://fedoranews.org/updates/FEDORA--.shtmlhttp://marc.info/?l=bugtraq&m=110737149402683&w=2http://marc.info/?l=full-disclosure&m=110779723332339&w=2http://secunia.com/advisories/14120http://secunia.com/advisories/21646https://exchange.xforce.ibmcloud.com/vulnerabilities/19207https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10404http://support.avaya.com/elmodocs2/security/ASA-2006-163.htmhttp://www.digitalmunition.com/DMA%5B2005-0131a%5D.txthttp://www.gentoo.org/security/en/glsa/glsa-200502-13.xmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:031