Lucene search

K
osvGoogleOSV:DSA-620-1
HistoryDec 30, 2004 - 12:00 a.m.

perl - insecure temporary files / directories

2004-12-3000:00:00
Google
osv.dev
10

0.0004 Low

EPSS

Percentile

10.1%

Several vulnerabilities have been discovered in Perl, the popular
scripting language. The Common Vulnerabilities and Exposures project
identifies the following problems:

  • CAN-2004-0452
    Jeroen van Wolffelaar discovered that the rmtree() function in the
    File::Path module removes directory trees in an insecure manner
    which could lead to the removal of arbitrary files and directories
    through a symlink attack.

  • CAN-2004-0976
    Trustix developers discovered several insecure uses of temporary
    files in many modules which allow a local attacker to overwrite
    files via a symlink attack.

For the stable distribution (woody) these problems have been fixed in
version 5.6.1-8.8.

For the unstable distribution (sid) these problems have been fixed in
version 5.8.4-5.

We recommend that you upgrade your perl packages.

CPENameOperatorVersion
perleq5.6.1-8.7