CVE-2005-4278

Published: Dec 16, 2005Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

Affected (17)

Products: Larry Wall: Perl

Larry Wall

1 product

Perl

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Larry Wall Perl	Up to 5.8.6
Larry Wall Perl	Version 5.3
Larry Wall Perl	Version 5.4.5
Larry Wall Perl	Version 5.4
Larry Wall Perl	Version 5.5.3
Larry Wall Perl	Version 5.5
Larry Wall Perl	Version 5.6.1
Larry Wall Perl	Version 5.8.0
Larry Wall Perl	Version 5.8.1
Larry Wall Perl	Version 5.8.3
Larry Wall Perl	Version 5.8.4.1
Larry Wall Perl	Version 5.8.4.2.3
Larry Wall Perl	Version 5.8.4.2
Larry Wall Perl	Version 5.8.4.3
Larry Wall Perl	Version 5.8.4.4
Larry Wall Perl	Version 5.8.4.5
Larry Wall Perl	Version 5.8.4