NVD

Id
61541  
Name
CVE-2006-2856  
Description
ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-06  
Modified Date
2011-03-07  
Seq
2006-2856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318326 61541 CVE-2006-2856 18269  View
318327 61541 CVE-2006-2856 ADV-2006-2140  View
318328 61541 CVE-2006-2856 activeperl-sitecustomize-code-execution(26915)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61538 JVNDB-2006-003804 Windows 用 ActiveState ActivePerl における権限を取得される脆弱性 Windows 用 ActiveState ActivePerl には、権限を取得される脆弱性が存在します。 CVE-2006-2856 18958 CVE-2006-2856 61541 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003804.html 2006-06-06 2013-12-26 View