CVE-2000-0703 describes a privilege escalation vulnerability in suidperl (sperl) versions of Larry Wall's Perl. The flaw allows local users to gain root privileges by manipulating the "interactive" environmental variable and providing a specially crafted filename containing the "~!" escape sequence, which suidperl fails to properly sanitize before calling /bin/mail for error reporting. This vulnerability carries a high CVSS score of 7.2, indicating a critical risk due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is also high at 86/100. While not listed on the KEV catalog or currently active on hotlists, exploit code for this vulnerability is publicly available on ExploitDB (EDB-20141 and EDB-20142). Despite its age and the availability of exploits, there is no recorded community discussion or media coverage for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.4.5CPE matchmatch criteria | cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:* | ||
5.5CPE matchmatch criteria | cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:* | ||
5.5.3CPE matchmatch criteria | cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:* | ||
5.6CPE matchmatch criteria | cpe:2.3:a:larry_wall:perl:5.6:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.