CVE-2000-0703: High severity Larry Wall Perl vulnerability
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0703?
CVE-2000-0703 has been assigned a moderate severity rating due to its potential for privilege escalation.
How do I fix CVE-2000-0703?
To fix CVE-2000-0703, users should upgrade to a newer version of Perl that does not include the vulnerable suidperl functionality.
Who is affected by CVE-2000-0703?
CVE-2000-0703 affects local users running versions of Perl 5.4.5, 5.5, and 5.6 that utilize the suidperl feature.
Can CVE-2000-0703 be exploited remotely?
CVE-2000-0703 cannot be exploited remotely as it requires local access to the system.
What is suidperl in relation to CVE-2000-0703?
Suidperl is a setuid version of Perl that allows users to run scripts with elevated privileges, making it susceptible to the vulnerability described in CVE-2000-0703.