PT-1996-1028 · Perl · Sperl+1

CVE-1999-0138

·

Publicado

1996-06-26

·

Atualizado

2022-08-17

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions sperl (affected versions not specified) suidperl (affected versions not specified)
Description The issue concerns the suidperl and sperl programs, which fail to relinquish root privileges when switching UIDs back to the original users. This allows unauthorized access to root.
Recommendations For sperl, consider disabling the program until a fix is available to prevent unauthorized root access. For suidperl, restrict its use to minimize the risk of exploitation until a resolution is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-1999-0138

Produtos afetados

Sperl
Suidperl