CVE-2005-4278: High severity Larry Wall Perl vulnerability
Published Dec 16, 2005
·Updated
Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected Software
17 affected components
Larry Wall Perl<=5.8.6
Larry Wall Perl=5.3
Larry Wall Perl=5.4
Larry Wall Perl=5.4.5
Larry Wall Perl=5.5
Larry Wall Perl=5.5.3
Larry Wall Perl=5.6.1
Larry Wall Perl=5.8.0
Larry Wall Perl=5.8.1
Larry Wall Perl=5.8.3
Larry Wall Perl=5.8.4
Larry Wall Perl=5.8.4.1
Larry Wall Perl=5.8.4.2
Larry Wall Perl=5.8.4.2.3
Larry Wall Perl=5.8.4.3
Larry Wall Perl=5.8.4.4
Larry Wall Perl=5.8.4.5
Remediation
Patch Available
Patch Available
Event History
Dec 16, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4278?
CVE-2005-4278 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2005-4278?
To fix CVE-2005-4278, update Perl to a version that is not affected, specifically 5.8.7-r1 or later.
3
Who is affected by CVE-2005-4278?
CVE-2005-4278 affects local users in the portage group on Gentoo Linux who use vulnerable versions of Perl.
4
What causes CVE-2005-4278?
CVE-2005-4278 is caused by an untrusted search path vulnerability in Perl that allows the execution of malicious shared objects.
5
Is CVE-2005-4278 specific to any operating system?
Yes, CVE-2005-4278 is specifically an issue in Gentoo Linux.