$ cve CVE-2005-4158 JSON

CVE-2005-4158 EXPLOIT

4.6

MEDIUM · CVSS 2.0 · EPSS 1.1% (pctl 64)

Patch early

A public exploit exists.

Description

Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.

Scoring

CVSS	4.6 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS	1.08% — more likely to be exploited than 64% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-12-11
Last modified	2026-06-16

Affected (1)

Vendor	Product
todd miller	sudo

Public exploits

Source	Title	Date
exploit-db	Sudo 1.6.x - Environment Variable Handling Security Bypass (1)	2006-01-09
exploit-db	Sudo 1.6.x - Environment Variable Handling Security Bypass (2)	2006-01-09
exploit-db	Sudo Perl 1.6.x - Environment Variable Handling Security Bypass	2005-11-11

References

→ the Explorer · watch your stack · NVD