CVE-2005-0156: IBM Aix

Low severity, CVSS 2.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.

Affected products

• IBM Aix: version 5.2 only; version 5.3 only
• Larry Wall Perl: version 5.8.0 only; version 5.8.1 only; version 5.8.3 only; version 5.8.4 only; version 5.8.4.1 only; version 5.8.4.2 only; …
• Red Hat Enterprise Linux: version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Red Hat Fedora Core: version core_3.0 only
• Sgi Propack: version 3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only; version 2.2 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2005-02-07. Last modified 2026-06-16.