CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4158

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.5%

CVSS Severity

CVSS v2 Score 4.6

References

Products affected by CVE-2005-4158

Todd Miller » Sudo » Version: 1.5.6

cpe:2.3:a:todd_miller:sudo:1.5.6
Todd Miller » Sudo » Version: 1.5.7

cpe:2.3:a:todd_miller:sudo:1.5.7
Todd Miller » Sudo » Version: 1.5.8

cpe:2.3:a:todd_miller:sudo:1.5.8
Todd Miller » Sudo » Version: 1.5.9

cpe:2.3:a:todd_miller:sudo:1.5.9
Todd Miller » Sudo » Version: 1.6

cpe:2.3:a:todd_miller:sudo:1.6
Todd Miller » Sudo » Version: 1.6.1

cpe:2.3:a:todd_miller:sudo:1.6.1
Todd Miller » Sudo » Version: 1.6.2

cpe:2.3:a:todd_miller:sudo:1.6.2
Todd Miller » Sudo » Version: 1.6.3

cpe:2.3:a:todd_miller:sudo:1.6.3
Todd Miller » Sudo » Version: 1.6.3_p1

cpe:2.3:a:todd_miller:sudo:1.6.3_p1
Todd Miller » Sudo » Version: 1.6.3_p2

cpe:2.3:a:todd_miller:sudo:1.6.3_p2
Todd Miller » Sudo » Version: 1.6.3_p3

cpe:2.3:a:todd_miller:sudo:1.6.3_p3
Todd Miller » Sudo » Version: 1.6.3_p4

cpe:2.3:a:todd_miller:sudo:1.6.3_p4
Todd Miller » Sudo » Version: 1.6.3_p5

cpe:2.3:a:todd_miller:sudo:1.6.3_p5
Todd Miller » Sudo » Version: 1.6.3_p6

cpe:2.3:a:todd_miller:sudo:1.6.3_p6
Todd Miller » Sudo » Version: 1.6.3_p7

cpe:2.3:a:todd_miller:sudo:1.6.3_p7
Todd Miller » Sudo » Version: 1.6.4

cpe:2.3:a:todd_miller:sudo:1.6.4
Todd Miller » Sudo » Version: 1.6.4_p1

cpe:2.3:a:todd_miller:sudo:1.6.4_p1
Todd Miller » Sudo » Version: 1.6.4_p2

cpe:2.3:a:todd_miller:sudo:1.6.4_p2
Todd Miller » Sudo » Version: 1.6.5

cpe:2.3:a:todd_miller:sudo:1.6.5
Todd Miller » Sudo » Version: 1.6.5_p1

cpe:2.3:a:todd_miller:sudo:1.6.5_p1
Todd Miller » Sudo » Version: 1.6.5_p2

cpe:2.3:a:todd_miller:sudo:1.6.5_p2
Todd Miller » Sudo » Version: 1.6.6

cpe:2.3:a:todd_miller:sudo:1.6.6
Todd Miller » Sudo » Version: 1.6.7

cpe:2.3:a:todd_miller:sudo:1.6.7
Todd Miller » Sudo » Version: 1.6.7_p5

cpe:2.3:a:todd_miller:sudo:1.6.7_p5
Todd Miller » Sudo » Version: 1.6.8

cpe:2.3:a:todd_miller:sudo:1.6.8
Todd Miller » Sudo » Version: 1.6.8_p1

cpe:2.3:a:todd_miller:sudo:1.6.8_p1
Todd Miller » Sudo » Version: 1.6.8_p5

cpe:2.3:a:todd_miller:sudo:1.6.8_p5
Todd Miller » Sudo » Version: 1.6.8_p7

cpe:2.3:a:todd_miller:sudo:1.6.8_p7
Todd Miller » Sudo » Version: 1.6.8_p8

cpe:2.3:a:todd_miller:sudo:1.6.8_p8
Todd Miller » Sudo » Version: 1.6.8_p9

cpe:2.3:a:todd_miller:sudo:1.6.8_p9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4158

Products

Pricing

Contact Us