CVE-2005-4158 Privilege escalation in n/a
Local attackers can escalate privileges by exploiting unfiltered Perl environment variables in Sudo when taint mode is disabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-4158?
CVE-2005-4158 is a medium-severity vulnerability in n/a, published on 11 Dec 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
Which versions are affected by CVE-2005-4158?
It affects 1 product.
Products include Todd Miller Sudo.
How do I fix CVE-2005-4158?
Upgrade to a fixed version.
Is CVE-2005-4158 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-4158 exists.
Public exploit code: 3 Exploit-DB entries.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2005-4158, GHSA-h6pw-5prw-wv25.