NVD

Id
69766  
Name
CVE-2005-4158  
Description
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-10  
Modified Date
2016-12-07  
Seq
2005-4158  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360528 69766 CVE-2005-4158 1015192  View
360529 69766 CVE-2005-4158 DSA-946  View
360530 69766 CVE-2005-4158 MDKSA-2006:159  View
360531 69766 CVE-2005-4158 SUSE-SR:2006:002  View
360532 69766 CVE-2005-4158 15394  View
360533 69766 CVE-2005-4158 http://www.sudo.ws/sudo/alerts/perl_env.html  View
360534 69766 CVE-2005-4158 2006-0002  View
360535 69766 CVE-2005-4158 ADV-2005-2386  View
360536 69766 CVE-2005-4158 sudo-perl-execute-code(23102)  View
360537 69766 CVE-2005-4158 USN-235-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62640 JVNDB-2005-000883 sudo の Perl スクリプト実行時における権限昇格の脆弱性 sudo には、Perl の Taint フラグが有効になっていない場合、PERLLIB、PERL5LIB および PERL5OPT 環境変数の初期化に不備があるため、権限昇格の脆弱性が存在します。 CVE-2005-4158 15360 CVE-2005-4158 69766 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000883.html 2005-11-08 2010-02-15 View