EDB-26498
functionalSudo Perl 1.6.x - Environment Variable Handling Security Bypass
view exploit source exploit_dbverifiedtype localauthor Charles Morrispublished 2005-11-11catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2005-4158US | medium4.6 | Exploit | ||
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to ca… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan