CVE-2000-0703: larry_wall perl
Vulnerability summary
CVE-2000-0703 is a high (CVSS 7.2) vulnerability in larry_wall perl. EPSS estimates a 1.07% chance of exploitation in the next 30 days, higher than 64.3% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 13-10-2000PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an error report, which allows local users to gain privileges by setting the "interactive" environmental variable and calling suidperl with a filename that contains the escape sequence.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.07%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.07% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
SUIDPerl 5.00503 - Mail Shell Escape (1)
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Larry_wall1 product
- perl5.4.5 | 5.5 | 5.5.3 | 5.6
1 vendor · 1 product
References
9 links- www.turbolinux.com/pipermail/tl-security-announce/2000-August/000017.htmlVendor AdvisoryX Refsource TURBO
- www.calderasystems.com/support/security/advisories/CSSA-2000-026.0.txtVendor AdvisoryX Refsource CALDERAPatch
- archives.neohapsis.com/archives/bugtraq/2000-08/0022.htmlMailing ListX Refsource BUGTRAQExploitVendor Advisory
- www.novell.com/linux/security/advisories/suse_security_announce_59.htmlVendor AdvisoryX Refsource SUSE