Privilege Escalation Vulnerability in SUID Perl
CVE-2000-0703
Currently unrated
What is CVE-2000-0703?
The SUID Perl (sperl) scripting language is susceptible to a vulnerability that allows local users to escalate their privileges. This occurs due to improper handling of escape sequences, specifically '~!', before executing the /bin/mail command to send error reports. By manipulating the 'interactive' environmental variable and providing a filename with the escape sequence, malicious users can execute arbitrary code with elevated privileges. It is crucial for administrators to review their use of SUID Perl and apply necessary patches or restrict access to mitigate the risks associated with this vulnerability.