Create an account

Subscribe to LWN

LWN.net Weekly Edition for May 16, 2013

A look at the PyPy 2.0 release

PostgreSQL 9.3 beta: Federated databases and more

LWN.net Weekly Edition for May 9, 2013

(Nearly) full tickless operation in 3.10

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

perl: symlink vulnerability

Package(s): perl CVE #(s): CAN-2005-0448

Created: March 9, 2005 Updated: January 30, 2006

Description: The rmtree() function in the File:Path.pm module has a symlink vulnerability which could be exploited to create setuid binaries.

Alerts:

Fedora-Legacy	FLSA:152845	2006-01-24
Red Hat	RHSA-2005:674-01	2005-10-05
Fedora	FEDORA-2005-600	2005-07-22
Mandriva	MDKSA-2005:079	2005-04-28
Debian	DSA-696-1	2005-03-22
Ubuntu	USN-94-1	2005-03-09

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds