|
|
| |
|
| |
perl: privilege escalation
| Package(s): | perl |
CVE #(s): | CVE-2008-5302
CVE-2008-5303
CVE-2005-0448
CVE-2004-0452
|
| Created: | December 3, 2008 |
Updated: | June 14, 2010 |
| Description: |
From the Debian advisory:
Paul Szabo rediscovered a vulnerability in the File::Path::rmtree
function of Perl. It was possible to exploit a race condition to create
setuid binaries in a directory tree or remove arbitrary files when a
process is deleting this tree. This issue was originally known as
CVE-2005-0448 and CVE-2004-0452, which were addressed by DSA-696-1 and
DSA-620-1. Unfortunately, they were reintroduced later.
|
| Alerts: |
|
( Log in to post comments)
|
|
|