CVE-2005-0156: Buffer Overflow
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIODEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0156?
CVE-2005-0156 is considered a high severity vulnerability due to its potential to allow local users to execute arbitrary code.
How do I fix CVE-2005-0156?
To fix CVE-2005-0156, it is recommended to upgrade to Perl version 5.8.5 or later, which resolves the buffer overflow issue.
What types of systems are affected by CVE-2005-0156?
CVE-2005-0156 affects systems running Perl versions 5.8.0 to 5.8.4.4, as well as various Linux distributions that include vulnerable Perl versions.
Can CVE-2005-0156 be exploited remotely?
No, CVE-2005-0156 can only be exploited locally by users with access to the system.
What is the cause of CVE-2005-0156?
CVE-2005-0156 is caused by a buffer overflow in the PerlIO implementation of Perl when setuid support is enabled.