Description
ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
- ADV-2006-2140 vdb-entry
- 20328 third-party-advisory
- activeperl-sitecustomize-code-execution(26915) vdb-entry
- 18269 vdb-entry
- 25974 vdb-entry