CVE-2005-0156: ibm aix
Vulnerability summary
CVE-2005-0156 is a low (CVSS 2.1) vulnerability in ibm aix. EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.7% of scored vulnerabilities. 2 public exploits are recorded.
Weaponized exploit (exploit-database, 07-02-2005)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 07-02-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.31%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.31% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (gentoo.org)
Maturity: unknown
Setuid perl - 'PerlIO_Debug()' Local Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat3 products
- enterprise_linux3.0
- enterprise_linux_desktop3.0
- fedora_corecore_3.0
Debian1 product
- perl< 5.8.4-6
Ibm1 product
- aix5.2 | 5.3
Larry_wall1 product
- perl5.8.0 | 5.8.1 | 5.8.3 | 5.8.4 | 5.8.4.1 | 5.8.4.2 | 5.8.4.2.3 | 5.8.4.3 | 5.8.4.4 | 5.8.4.5
Sgi1 product
- propack3.0
Suse1 product
- suse_linux8.0 | 8.1 | 8.2 | 9.0 | 9.1 | 9.2
Trustix1 product
- secure_linux1.5 | 2.0 | 2.1 | 2.2
Ubuntu1 product
- ubuntu_linux4.1
8 vendors · 10 products
References
16 links- www.digitalmunition.com/DMA%5B2005-0131b%5D.txtX Refsource MISC
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10803VDB EntrySignatureX Refsource OVAL
