CVE-2005-4158
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2)...
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
Exploit likelihood
What each source reports
NVD Score used
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
CVE-2005-4158- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
CVE-2005-4158- Updated
- 2026-11-02
EUVDEUVD-2005-4153 No score
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
EUVD-2005-4153- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6pw-5prw-wv25 No score
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2)...
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
GHSA-h6pw-5prw-wv25- Updated
- 2026-11-02
OSV No score
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
CVE-2005-4158- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-4158 No score
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
- Record
DEBIAN-CVE-2005-4158- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11413-1 No score
sudo-1.9.7p2-1.4 on GA media
These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11413-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoDebian:12 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:13 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:14 |
before 1.6.8p12-1 | 1.6.8p12-1 |
sudoDebian:3.0 |
before 1.6.6-1.6, plus listed versions 1.6.6-1.31.6.6-1.3woody11.6.6-1.41.6.6-1.5 |
1.6.6-1.6 |
sudoDebian:3.1 |
before 1.6.8p7-1.4, plus listed versions 1.6.8p7-1.11.6.8p7-1.1sarge11.6.8p7-1.21.6.8p7-1.3 |
1.6.8p7-1.4 |
sudoopenSUSE:Tumbleweed |
before 1.9.7p2-1.4 | 1.9.7p2-1.4 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sudo Perl 1.6.x - Environment Variable Handling Security Bypass | 2005-11-11 |
| Exploit-DB | Sudo 1.6.x - Environment Variable Handling Security Bypass (1) | 2006-01-09 |
| Exploit-DB | Sudo 1.6.x - Environment Variable Handling Security Bypass (2) | 2006-01-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-4158 is a medium vulnerability (CVSS 4.6) in Todd Miller Sudo, published December 11, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in sudo 1.6.8p12-1.
References
mandriva.com/security/advisories?name=MDKSA-2005:234
secunia.com/advisories/18549
exchange.xforce.ibmcloud.com/vulnerabilities/23102
trustix.org/errata/2006/0002
Show 27 moreShow less
vupen.com/english/advisories/2005/2386
securityfocus.com/bid/15394
ubuntu.com/usn/usn-235-1
novell.com/linux/security/advisories/2006_02_sr.html
debian.org/security/2006/dsa-946
securitytracker.com/alerts/2005/Nov/1015192.html
sudo.ws/sudo/alerts/perl_env.html
nvd.nist.gov/vuln/detail/CVE-2005-4158
github.com/advisories/GHSA-h6pw-5prw-wv25
security-tracker.debian.org/tracker/CVE-2005-4158
suse.com/security/cve/CVE-2005-4158