CVE - CVE-2008-2827

CVE-ID
CVE-2008-2827	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:29902 URL:http://www.securityfocus.com/bid/29902 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487319 FEDORA:FEDORA-2008-5739 URL:https://www.redhat.com/archives/fedora-package-announce/2008-June/msg01025.html MANDRIVA:MDVSA-2008:165 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:165~~ (Obsolete source) MISC:http://rt.cpan.org/Public/Bug/Display.html?id=36982 SECTRACK:1020373 URL:http://www.securitytracker.com/id?1020373 SECUNIA:30790 URL:http://secunia.com/advisories/30790 SECUNIA:30837 URL:http://secunia.com/advisories/30837 SECUNIA:31687 URL:http://secunia.com/advisories/31687 SUSE:SUSE-SR:2008:017 URL:http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html XF:perl-filepath-rmtree-symlink(43308) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/43308
Assigning CNA
MITRE Corporation
Date Record Created
20080623	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20080623)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)