CVE-2005-4158

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

• http://secunia.com/advisories/17534/Patch, Vendor Advisory
• http://secunia.com/advisories/18102
• http://secunia.com/advisories/18156
• http://secunia.com/advisories/18308
• http://secunia.com/advisories/18463
• http://secunia.com/advisories/18549
• http://secunia.com/advisories/18558
• http://secunia.com/advisories/21692
• http://securitytracker.com/alerts/2005/Nov/1015192.htmlPatch
• http://www.debian.org/security/2006/dsa-946
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:234
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:159
• http://www.novell.com/linux/security/advisories/2006_02_sr.html
• http://www.securityfocus.com/bid/15394Exploit, Patch
• http://www.sudo.ws/sudo/alerts/perl_env.htmlPatch, Vendor Advisory
• http://www.trustix.org/errata/2006/0002/
• http://www.vupen.com/english/advisories/2005/2386
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23102
• https://www.ubuntu.com/usn/usn-235-1/
• http://secunia.com/advisories/17534/Patch, Vendor Advisory
• http://secunia.com/advisories/18102
• http://secunia.com/advisories/18156
• http://secunia.com/advisories/18308
• http://secunia.com/advisories/18463
• http://secunia.com/advisories/18549
• http://secunia.com/advisories/18558
• http://secunia.com/advisories/21692
• http://securitytracker.com/alerts/2005/Nov/1015192.htmlPatch
• http://www.debian.org/security/2006/dsa-946
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:234
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:159
• http://www.novell.com/linux/security/advisories/2006_02_sr.html
• http://www.securityfocus.com/bid/15394Exploit, Patch
• http://www.sudo.ws/sudo/alerts/perl_env.htmlPatch, Vendor Advisory
• http://www.trustix.org/errata/2006/0002/
• http://www.vupen.com/english/advisories/2005/2386
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23102
• https://www.ubuntu.com/usn/usn-235-1/

Published

Dec 11, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4152Soti Pocket Controller-Professional 5.0 allows remote attack…
• CVE-2005-4153Mailman 2.1.4 through 2.1.6 allows remote attackers to cause…
• CVE-2005-4154Unspecified vulnerability in PEAR installer 1.4.2 and earlie…
• CVE-2005-4155registration.PHP in ATutor 1.5.1 pl2 allows remote attackers…
• CVE-2005-4156Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (…
• CVE-2005-4157Unspecified vulnerability in Kerio WinRoute Firewall before …
• CVE-2005-4159NOTE: this issue has been disputed by the vendor and third p…
• CVE-2005-4160Directory traversal vulnerability in getdox.php in Torrentia…
• CVE-2005-4161Multiple cross-site scripting (XSS) vulnerabilities in Milli…
• CVE-2005-4162Cross-site scripting (XSS) vulnerability in cal_make.pl in A…
• CVE-2005-4163Directory traversal vulnerability in captcha.php in Captcha …
• CVE-2005-4164SQL injection vulnerability in view.php in PHP-addressbook 1…