CVE

Id
15362  
CVE No.
CVE-2005-4158  
Status
Candidate  
Description
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.  
Phase
Assigned (20051211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
120194 15362 CVE-2005-4158 CONFIRM:http://www.sudo.ws/sudo/alerts/perl_env.html  View
120195 15362 CVE-2005-4158 DEBIAN:DSA-946  View
120196 15362 CVE-2005-4158 URL:http://www.debian.org/security/2006/dsa-946  View
120197 15362 CVE-2005-4158 MANDRAKE:MDKSA-2005:234  View
120198 15362 CVE-2005-4158 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:234  View
120199 15362 CVE-2005-4158 MANDRIVA:MDKSA-2006:159  View
120200 15362 CVE-2005-4158 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:159  View
120201 15362 CVE-2005-4158 SUSE:SUSE-SR:2006:002  View
120202 15362 CVE-2005-4158 URL:http://www.novell.com/linux/security/advisories/2006_02_sr.html  View
120203 15362 CVE-2005-4158 TRUSTIX:2006-0002  View
120204 15362 CVE-2005-4158 URL:http://www.trustix.org/errata/2006/0002/  View
120205 15362 CVE-2005-4158 UBUNTU:USN-235-1  View
120206 15362 CVE-2005-4158 URL:https://www.ubuntu.com/usn/usn-235-1/  View
120207 15362 CVE-2005-4158 BID:15394  View
120208 15362 CVE-2005-4158 URL:http://www.securityfocus.com/bid/15394  View
120209 15362 CVE-2005-4158 VUPEN:ADV-2005-2386  View
120210 15362 CVE-2005-4158 URL:http://www.vupen.com/english/advisories/2005/2386  View
120211 15362 CVE-2005-4158 SECTRACK:1015192  View
120212 15362 CVE-2005-4158 URL:http://securitytracker.com/alerts/2005/Nov/1015192.html  View
120213 15362 CVE-2005-4158 SECUNIA:17534  View
120214 15362 CVE-2005-4158 URL:http://secunia.com/advisories/17534/  View
120215 15362 CVE-2005-4158 SECUNIA:18156  View
120216 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18156  View
120217 15362 CVE-2005-4158 SECUNIA:18308  View
120218 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18308  View
120219 15362 CVE-2005-4158 SECUNIA:18549  View
120220 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18549  View
120221 15362 CVE-2005-4158 SECUNIA:18102  View
120222 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18102  View
120223 15362 CVE-2005-4158 SECUNIA:18558  View
120224 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18558  View
120225 15362 CVE-2005-4158 SECUNIA:18463  View
120226 15362 CVE-2005-4158 URL:http://secunia.com/advisories/18463  View
120227 15362 CVE-2005-4158 SECUNIA:21692  View
120228 15362 CVE-2005-4158 URL:http://secunia.com/advisories/21692  View
120229 15362 CVE-2005-4158 XF:sudo-perl-execute-code(23102)  View

Related JVN