Search/CVE-2006-2856
● CVE

CVE-2006-2856

VendoractivestateProductactiveperlDiscoveredJun 6, 2006UpdatedApr 16, 2026

ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CVSS v3.1
—
EPSS
0.38%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Jun 6, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026