{"url":"http://public2.vulnerablecode.io/api/packages/98961?format=json","purl":"pkg:deb/debian/perl@5.8.4-6?distro=trixie","type":"deb","namespace":"debian","name":"perl","version":"5.8.4-6","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"5.8.4-7","latest_non_vulnerable_version":"5.40.1-8","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/199969?format=json","vulnerability_id":"VCID-2f7d-rmeh-gfbe","summary":"The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0155.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0155.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0155","reference_id":"","reference_type":"","scores":[{"value":"0.00372","scoring_system":"epss","scoring_elements":"0.594","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0155"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0155","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0155"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617476","reference_id":"1617476","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617476"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/792.c","reference_id":"OSVDB-13451;CVE-2005-0155","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/792.c"},{"reference_url":"https://access.redhat.com/errata/RHSA-2005:103","reference_id":"RHSA-2005:103","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2005:103"},{"reference_url":"https://access.redhat.com/errata/RHSA-2005:105","reference_id":"RHSA-2005:105","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2005:105"},{"reference_url":"https://usn.ubuntu.com/72-1/","reference_id":"USN-72-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/72-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/98961?format=json","purl":"pkg:deb/debian/perl@5.8.4-6?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.4-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98950?format=json","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"},{"vulnerability":"VCID-zjj6-ys8h-kyd6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.32.1-4%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98948?format=json","purl":"pkg:deb/debian/perl@5.36.0-7%2Bdeb12u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"},{"vulnerability":"VCID-zjj6-ys8h-kyd6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.36.0-7%252Bdeb12u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98953?format=json","purl":"pkg:deb/debian/perl@5.40.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98951?format=json","purl":"pkg:deb/debian/perl@5.40.1-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98952?format=json","purl":"pkg:deb/debian/perl@5.40.1-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-8%3Fdistro=trixie"}],"aliases":["CVE-2005-0155"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2f7d-rmeh-gfbe"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/199970?format=json","vulnerability_id":"VCID-r57q-ty6k-9fcc","summary":"Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0156.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0156.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0156","reference_id":"","reference_type":"","scores":[{"value":"0.00386","scoring_system":"epss","scoring_elements":"0.60188","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2005-0156"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0156","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0156"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617477","reference_id":"1617477","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1617477"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/791.c","reference_id":"OSVDB-13452;CVE-2005-0156","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/791.c"},{"reference_url":"https://access.redhat.com/errata/RHSA-2005:103","reference_id":"RHSA-2005:103","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2005:103"},{"reference_url":"https://access.redhat.com/errata/RHSA-2005:105","reference_id":"RHSA-2005:105","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2005:105"},{"reference_url":"https://usn.ubuntu.com/72-1/","reference_id":"USN-72-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/72-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/98961?format=json","purl":"pkg:deb/debian/perl@5.8.4-6?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.4-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98950?format=json","purl":"pkg:deb/debian/perl@5.32.1-4%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"},{"vulnerability":"VCID-zjj6-ys8h-kyd6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.32.1-4%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98948?format=json","purl":"pkg:deb/debian/perl@5.36.0-7%2Bdeb12u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"},{"vulnerability":"VCID-zjj6-ys8h-kyd6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.36.0-7%252Bdeb12u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98953?format=json","purl":"pkg:deb/debian/perl@5.40.1-6?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-6%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98951?format=json","purl":"pkg:deb/debian/perl@5.40.1-7?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3vqk-x79n-y3hy"},{"vulnerability":"VCID-96e9-un4b-53at"},{"vulnerability":"VCID-tter-nwjj-8yc6"},{"vulnerability":"VCID-w6rm-6jj7-mucf"},{"vulnerability":"VCID-xx6w-r4n4-y3et"},{"vulnerability":"VCID-yb2u-p5jv-b7d1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-7%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/98952?format=json","purl":"pkg:deb/debian/perl@5.40.1-8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-8%3Fdistro=trixie"}],"aliases":["CVE-2005-0156"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-r57q-ty6k-9fcc"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.4-6%3Fdistro=trixie"}