Lucene search
MitreCVE-2005-4278HistoryDec 16, 2005 - 11:03 a.m.
CVE-2005-4278
2005-12-1611:03:00
mitre
web.nvd.nist.gov
22
cve-2005-4278
untrusted search path vulnerability
perl
gentoo linux
local users
privileges
shared object
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
25.6%
Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected configurations
Node
larry_wallperlRange≤5.8.6
ORlarry_wallperlMatch5.3
ORlarry_wallperlMatch5.4
ORlarry_wallperlMatch5.4.5
ORlarry_wallperlMatch5.5
ORlarry_wallperlMatch5.5.3
ORlarry_wallperlMatch5.6.1
ORlarry_wallperlMatch5.8.0
ORlarry_wallperlMatch5.8.1
ORlarry_wallperlMatch5.8.3
ORlarry_wallperlMatch5.8.4
ORlarry_wallperlMatch5.8.4.1
ORlarry_wallperlMatch5.8.4.2
ORlarry_wallperlMatch5.8.4.2.3
ORlarry_wallperlMatch5.8.4.3
ORlarry_wallperlMatch5.8.4.4
ORlarry_wallperlMatch5.8.4.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| larry_wall | perl | * | cpe:2.3:a:larry_wall:perl:*:*:*:*:*:*:*:* |
| larry_wall | perl | 5.3 | cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:* |
| larry_wall | perl | 5.4 | cpe:2.3:a:larry_wall:perl:5.4:*:*:*:*:*:*:* |
| larry_wall | perl | 5.4.5 | cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:* |
| larry_wall | perl | 5.5 | cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:* |
| larry_wall | perl | 5.5.3 | cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:* |
| larry_wall | perl | 5.6.1 | cpe:2.3:a:larry_wall:perl:5.6.1:*:*:*:*:*:*:* |
| larry_wall | perl | 5.8.0 | cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:* |
| larry_wall | perl | 5.8.1 | cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:* |
| larry_wall | perl | 5.8.3 | cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2005-4278
2005-12-16 11:00:00
nvd
nvd
CVE-2005-4278
2005-12-16 11:03:00
debiancve
debiancve
CVE-2005-4278
2005-12-16 11:03:00
openvas
openvas
Gentoo Security Advisory GLSA 200510-14 (Perl Qt-UnixODBC CMake)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200510-14 (Perl Qt-UnixODBC CMake)
2008-09-24 00:00:00
gentoo
gentoo
Perl, Qt-UnixODBC, CMake: RUNPATH issues
2005-10-17 00:00:00
nessus
nessus
GLSA-200510-14 : Perl, Qt-UnixODBC, CMake: RUNPATH issues
2005-10-19 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
25.6%
Related for CVE-2005-4278