Lucene search

K
prionPRIOn knowledge basePRION:CVE-2006-2856
HistoryJun 06, 2006 - 8:06 p.m.

Design/Logic Flaw

2006-06-0620:06:00
PRIOn knowledge base
www.prio-n.com
3

6.8 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with β€œUsers” group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
activeperleq5.8.8.817 windows

6.8 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.4%

Related for PRION:CVE-2006-2856