vulnwire
4.6med

CVE-2005-41583 exploits

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variable…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.1%
percentile 65%
Public exploits
3
Exploit-DB

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Exploit prediction (EPSS)

1.08% probability of exploitation in the next 30 days, higher than 65% of all scored CVEs.

Exploits and detections

  • EDB-27057 Sudo 1.6.x - Environment Variable Handling Security Bypass (2) · local · 2006-01-09
  • EDB-27056 Sudo 1.6.x - Environment Variable Handling Security Bypass (1) · local · 2006-01-09
  • EDB-26498 Sudo Perl 1.6.x - Environment Variable Handling Security Bypass · local · 2005-11-11

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • mandriva.com /security/advisories?name=MDKSA-2005:234 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • secunia.com /advisories/18549 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/23102 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/18558 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • trustix.org /errata/2006/0002/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
  • secunia.com /advisories/18463 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18308 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2005/2386 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/15394 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/18156 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/18102 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • ubuntu.com /usn/usn-235-1/ · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • novell.com /linux/security/advisories/2006_02_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • debian.org /security/2006/dsa-946 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securitytracker.com /alerts/2005/Nov/1015192.html · vdb-entry, x_refsource_SECTRACK, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2006:159 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/21692 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • sudo.ws /sudo/alerts/perl_env.html · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/17534/ · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.