QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-4158

Back to search

CVE-2005-4158

Published: Dec 11, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

VendorProductVersions

n/a

n/a

affected
n/a

References

MDKSA-2005:234
vendor-advisory
x_refsource_MANDRAKE
18549
third-party-advisory
x_refsource_SECUNIA
sudo-perl-execute-code(23102)
vdb-entry
x_refsource_XF
18558
third-party-advisory
x_refsource_SECUNIA
2006-0002
vendor-advisory
x_refsource_TRUSTIX
18463
third-party-advisory
x_refsource_SECUNIA
18308
third-party-advisory
x_refsource_SECUNIA
ADV-2005-2386
vdb-entry
x_refsource_VUPEN
15394
vdb-entry
x_refsource_BID
18156
third-party-advisory
x_refsource_SECUNIA
18102
third-party-advisory
x_refsource_SECUNIA
USN-235-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SR:2006:002
vendor-advisory
x_refsource_SUSE
DSA-946
vendor-advisory
x_refsource_DEBIAN
1015192
vdb-entry
x_refsource_SECTRACK
MDKSA-2006:159
vendor-advisory
x_refsource_MANDRIVA
21692
third-party-advisory
x_refsource_SECUNIA
17534
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now