CVE-2012-5377

MEDIUM 6.0CVE-2012-5377 · Published 11/10/2012 · updated 16/06/2026

In short

CVE-2012-5377 is a MEDIUM (CVSS 6.0) vulnerability affecting activeperl (activestate).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 69.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
activeperl activestate	`= 5.16.1.1601`	No fix yet

Description

Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system environment variable, as demonstrated by a Trojan horse wlbsctrl.dll file used by the "IKE and AuthIP IPsec Keying Modules" system service in Windows Vista SP1, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8 Release Preview.

References

osvdb.org/86177
htbridge.com/advisory/HTB23108 · Exploit

More vulnerabilities in activeperl

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free