exploits , vulnerabilities , articles , Perl SuidPerl Multiple Local Vulnerabilities

Title	Perl SuidPerl Multiple Local Vulnerabilities
Published	2005-02-02-12:00AM
Updated	2005-06-11-12:46AM
Class	Unknown
CVE	CAN-2005-0155 CAN-2005-0156
Remote	No
Local	Yes
Credit	These vulnerabilities were announced in a vendor advisory.
Vulnerable	Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Trustix Secure Linux 2.2 Trustix Secure Linux 2.1 Trustix Secure Linux 1.5 Trustix Secure Enterprise Linux 2.0 SGI ProPack 3.0 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux 8.1 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 RedHat Fedora Core3 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 3 RedHat Desktop 3.0 Larry Wall Perl 5.8.4 5 Larry Wall Perl 5.8.4 4 Larry Wall Perl 5.8.4 3 Larry Wall Perl 5.8.4 2.3 Larry Wall Perl 5.8.4 2 Larry Wall Perl 5.8.4 1 Larry Wall Perl 5.8.4 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 Larry Wall Perl 5.8.3 Gentoo Linux Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Ubuntu Ubuntu Linux 4.1 ia32 Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ppc Larry Wall Perl 5.8.1 Larry Wall Perl 5.8 Turbolinux Home Turbolinux Turbolinux Desktop 10.0 IBM AIX 5.3 IBM AIX 5.2
Not Vulnerable
Code	Kevin Finisterre <kf@digitalmunition.com> has provided the following proof of concept exploits: /data/vulnerabilities/exploits/ex_perl.c /data/vulnerabilities/exploits/ex_perl2.c /data/vulnerabilities/exploits/ex_perl.c /data/vulnerabilities/exploits/ex_perl2.c
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-03 Adobe Acrobat 9 Unspecified PDF Document Encryption Weakness
2008-12-03 Ocean12 Mailing List Manager Gold SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-03 IBM Rational ClearQuest Maintenance Tool Local Information Disclosure Vulnerability
2008-12-03 VMware Products Unspecified Host Memory Corruption Vulnerability
2008-12-03 IBM Rational ClearQuest Web Multiple Unspecified Cross Site Scripting Vulnerabilities
2008-12-02 RakhiSoftware Shopping Cart Multiple Remote Vulnerabilities
2008-12-02 Softbiz Classifieds Script Multiple Cross Site Scripting Vulnerabilities
2008-12-02 CodeToad ASP Shopping Cart Script Cross Site Scripting Vulnerability
2008-12-02 xrdp Multiple Buffer Overflow Vulnerabilities
2008-12-02 FFmpeg Multiple Denial of Service Vulnerabilities