CVE-2005-0155
Fixed in a distro release EPSS 1%
The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.
Products: larry_wall perl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | perl | 5.8.4-6 |
| Debian 13 | perl | 5.8.4-6 |
| Debian 14 | perl | 5.8.4-6 |
| Red Hat Enterprise Linux 3 | perl | 2:5.8.0-89.10 |
| Red Hat Enterprise Linux 3 | perl-CGI | 2:2.81-89.10 |
| Red Hat Enterprise Linux 3 | perl-CPAN | 2:1.61-89.10 |
| Red Hat Enterprise Linux 3 | perl-DB_File | 2:1.804-89.10 |
| Red Hat Enterprise Linux 3 | perl-debuginfo | 2:5.8.0-89.10 |
| Red Hat Enterprise Linux 3 | perl-suidperl | 2:5.8.0-89.10 |
| Red Hat Enterprise Linux 4 | perl | 3:5.8.5-12.1 |
| Red Hat Enterprise Linux 4 | perl-debuginfo | 3:5.8.5-12.1 |
| Red Hat Enterprise Linux 4 | perl-suidperl | 3:5.8.5-12.1.1 |