The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade perl | Jul 30, 2024 | May 2, 2005 |
| Freebsd | — | Upgrade perl-threadedUpgrade perl | Dec 10, 2025 | Feb 2, 2005 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Oct 30, 2017 | May 2, 2005 |
| Suse | — | Upgrade perl-32bitUpgrade perlUpgrade perl-64bitUpgrade perl-x86 | Feb 17, 2015 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub