CVEvulnerability

CVE-2005-4278

7.2 HIGH Published 2005-12-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

Affected configurations

• larry wall perl (<= 5.8.6) • larry wall perl 5.3 • larry wall perl 5.4 • larry wall perl 5.4.5 • larry wall perl 5.5 • larry wall perl 5.5.3 • larry wall perl 5.6.1 • larry wall perl 5.8.0 • larry wall perl 5.8.1 • larry wall perl 5.8.3 • larry wall perl 5.8.4 • larry wall perl 5.8.4.1 • larry wall perl 5.8.4.2 • larry wall perl 5.8.4.2.3 • larry wall perl 5.8.4.3 • larry wall perl 5.8.4.4 • larry wall perl 5.8.4.5

References