CVE-2006-2856 ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious si...
MediumCVSS 4.6
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activestate activeperl | = 5.8.8.817 | No fix listed |
References
- 20328 third-party-advisory vendor-advisory
- 25974 vdb-entry
- 18269 vdb-entry
- ADV-2006-2140 vdb-entry
- activeperl-sitecustomize-code-execution(26915) vdb-entry