FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0156

This CVE name corresponds to:

Entered	Topic
2005-02-02	perl -- vulnerabilities in PERLIO_DEBUG handling

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0156 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0156
Phase	Assigned(20050127)

Description

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

References

Source	Reference
FULLDISC	20050207 DMA[2005-0131b] - 'Setuid Perl PERLIO_DEBUG
MISC	http://www.digitalmunition.com/DMA[2005-0131b].txt
CONECTIVA	CLSA-2006:1056
FEDORA	FLSA-2006:152845
GENTOO	GLSA-200502-13
MANDRAKE	MDKSA-2005:031
REDHAT	RHSA-2005:103
REDHAT	RHSA-2005:105
TRUSTIX	2005-0003
BUGTRAQ	20050202 [USN-72-1] Perl vulnerabilities
BID	12426
OVAL	oval:org.mitre.oval:def:10803
SECUNIA	14120
SECUNIA	55314
XF	perl-perliodebug-bo(19208)