perl information leak [LWN.net]

Package(s):

perl

CVE #(s):

CAN-2003-0618

Created:

February 2, 2004

Updated:

April 21, 2004

Description:

Paul Szabo discovered a number of bugs in suidperl, a helper program to run perl scripts with setuid privileges. By exploiting these bugs, an attacker could abuse suidperl to discover information about files (such as testing for their existence and some of their permissions) that should not be accessible to unprivileged users.

Alerts:

Debian	DSA-431-2	2004-04-16
Debian	DSA-431-1	2004-02-01

(Log in to post comments)