← Back

CVE-2005-4158

nvd nist
Published: Dec 11, 2005Modified: Apr 16, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Affected (30)

Products: Todd Miller: Sudo
Todd Miller
1 product
Sudo
Configuration A
30 vulnerable
Vulnerable SoftwareAffected Versions
Todd Miller
Sudo
Version 1.5.6
Sudo
Version 1.5.7
Sudo
Version 1.5.8
Sudo
Version 1.5.9
Sudo
Version 1.6.1
Sudo
Version 1.6.2
Sudo
Version 1.6.3
Sudo
Version 1.6.3_p1
Sudo
Version 1.6.3_p2
Sudo
Version 1.6.3_p3
Sudo
Version 1.6.3_p4
Sudo
Version 1.6.3_p5
Sudo
Version 1.6.3_p6
Sudo
Version 1.6.3_p7
Sudo
Version 1.6.4
Sudo
Version 1.6.4_p1
Sudo
Version 1.6.4_p2
Sudo
Version 1.6.5
Sudo
Version 1.6.5_p1
Sudo
Version 1.6.5_p2
Sudo
Version 1.6.6
Sudo
Version 1.6.7
Sudo
Version 1.6.7_p5
Sudo
Version 1.6.8
Sudo
Version 1.6.8_p1
Sudo
Version 1.6.8_p5
Sudo
Version 1.6.8_p7
Sudo
Version 1.6.8_p8
Sudo
Version 1.6.8_p9
Sudo
Version 1.6

References (38)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.