p PatchFirst

CVE-2005-4158

CVE-2005-4158

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

EPSS 1.1% · Public exploit · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • sudo Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.6.8p12-1

    Update to 1.6.8p12-1

  • sudo Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.6.8p12-1

    Update to 1.6.8p12-1

  • sudo Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.6.8p12-1

    Update to 1.6.8p12-1

Original sources

Check your server →