Description
Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.
Affected products
- larry_wall / perl5.8.6
- larry_wall / perl5.3 – 5.3
- larry_wall / perl5.4 – 5.4
- larry_wall / perl5.4.5 – 5.4.5
- larry_wall / perl5.5 – 5.5
- larry_wall / perl5.5.3 – 5.5.3
- larry_wall / perl5.6.1 – 5.6.1
- larry_wall / perl5.8.0 – 5.8.0
- larry_wall / perl5.8.1 – 5.8.1
- larry_wall / perl5.8.3 – 5.8.3
- larry_wall / perl5.8.4 – 5.8.4
- larry_wall / perl5.8.4.1 – 5.8.4.1
- larry_wall / perl5.8.4.2 – 5.8.4.2
- larry_wall / perl5.8.4.2.3 – 5.8.4.2.3
- larry_wall / perl5.8.4.3 – 5.8.4.3
- larry_wall / perl5.8.4.4 – 5.8.4.4
- larry_wall / perl5.8.4.5 – 5.8.4.5