FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0155

This CVE name corresponds to:

Entered	Topic
2005-02-02	perl -- vulnerabilities in PERLIO_DEBUG handling

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0155 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0155
Phase	Assigned(20050127)

Description

The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.

References

Source	Reference
FULLDISC	20050207 DMA[2005-0131a] - 'Setuid Perl PERLIO_DEBUG root owned file creation'
MISC	http://www.digitalmunition.com/DMA[2005-0131a].txt
CONFIRM	http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm
CONECTIVA	CLSA-2006:1056
FEDORA	FLSA-2006:152845
GENTOO	GLSA-200502-13
MANDRAKE	MDKSA-2005:031
REDHAT	RHSA-2005:103
REDHAT	RHSA-2005:105
TRUSTIX	2005-0003
BUGTRAQ	20050202 [USN-72-1] Perl vulnerabilities
BID	12426
OVAL	oval:org.mitre.oval:def:10404
SECUNIA	14120
SECUNIA	21646
XF	perl-perliodebug-file-overwrite(19207)