CVE-2005-0155

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-02 · updated 2026-06-16

Description

The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.

Affected products

Larry Wall Perl: 5.8.0

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
http://fedoranews.org/updates/FEDORA--.shtml
http://marc.info/?l=bugtraq&m=110737149402683&w=2
http://marc.info/?l=full-disclosure&m=110779723332339&w=2
http://secunia.com/advisories/14120
http://secunia.com/advisories/21646
http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm
http://www.digitalmunition.com/DMA%5B2005-0131a%5D.txt
http://www.gentoo.org/security/en/glsa/glsa-200502-13.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:031
http://www.redhat.com/support/errata/RHSA-2005-103.html
http://www.redhat.com/support/errata/RHSA-2005-105.html

Get alerted when CVE-2005-0155 or the next vulnerability affects your stack