NetSight
IP …
low2.1Public exploit code

CVE-2005-0156

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected products

VendorProductAffected versions
Larry WallPerl
Versions 5.8.0, 5.8.1, 5.8.3, 5.8.4, 5.8.4.1, 5.8.4.2
SgiPropack
Version 3.0
IbmAix
Versions 5.2, 5.3
RedhatEnterprise Linux
Version 3.0
RedhatEnterprise Linux Desktop
Version 3.0
RedhatFedora Core
Version core_3.0
SuseSuse Linux
Versions 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
TrustixSecure Linux
Versions 1.5, 2.0, 2.1, 2.2
UbuntuUbuntu Linux
Version 4.1

References