Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl SuidPerl多个本地漏洞
Vulnerability Description
Perl是流行的跨平台编程语言。 部分Perl脚本在处理PERLIO_DEBUG变量时存在问题，本地攻击者可以利用这个漏洞破坏系统文件或进行缓冲区溢出攻击。 攻击者可以通过设置PERLIO_DEBUG环境变量和调用任意setuid-root perl脚本来覆盖任何文件，PERLIO_DEBUG指向的文件然后会被PERL调试消息所覆盖，这个问题不能精确控制文件内容，但可以破坏重要数据。 另外如果PERLIO_DEBUG设置，调用带超长路径的setuid-perl脚本，可导致缓冲区溢出，精心构建提交数据可能以
CVSS Information
N/A
Vulnerability Type
N/A