CVE-2005-0155: Medium severity larry wall perl vulnerability
Published Feb 7, 2005
·Updated
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIODEBUG variable.
Affected Software
1 affected component
Larry Wall Perl=5.8.0
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Feb 7, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0155?
CVE-2005-0155 has been classified as a high-severity vulnerability due to its potential to allow local users to create arbitrary files.
2
How do I fix CVE-2005-0155?
To fix CVE-2005-0155, you should upgrade to a version of Perl that is later than 5.8.0 and does not include the vulnerable setuid configuration.
3
Who is affected by CVE-2005-0155?
Local users on systems running Perl 5.8.0 with setuid support enabled are affected by CVE-2005-0155.
4
What can attackers achieve by exploiting CVE-2005-0155?
Attackers can exploit CVE-2005-0155 to create arbitrary files, which can lead to further system compromise.
5
Is CVE-2005-0155 a remote or local vulnerability?
CVE-2005-0155 is a local vulnerability, as it requires access to the system to be exploited.