medium4.6Public exploit code

CVE-2005-4158

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Sudo 1.6.x - Environment Variable Handling Security Bypass (2)2006-01-09 · local · linux · Verified
Sudo 1.6.x - Environment Variable Handling Security Bypass (1)2006-01-09 · local · linux · Verified
Sudo Perl 1.6.x - Environment Variable Handling Security Bypass2005-11-11 · local · linux · Verified

Impact

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Affected products

Vendor	Product	Affected versions
Todd Miller	Sudo	Versions 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6, 1.6.1

Public exploit code

Impact

Affected products

References