CVE-2005-0156

Description

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
• http://fedoranews.org/updates/FEDORA--.shtml
• http://marc.info/?l=bugtraq&m=110737149402683&w=2
• http://marc.info/?l=full-disclosure&m=110779721503111&w=2
• http://secunia.com/advisories/14120
• http://secunia.com/advisories/55314