Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5302
HistoryDec 01, 2008 - 5:30 p.m.

CVE-2008-5302

2008-12-0117:30:00
CWE-362
[email protected]
web.nvd.nist.gov
38
cve-2008-5302
file::path 1.08
file::path 2.07
perl 5.8.8
perl 5.10.0
race condition
symlink attack

6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

CPENameOperatorVersion
perl:file\perl file\eq\

References

Related

ubuntucve 5
debiancve 5
prion 3
cve 4
openvas 46
debian 6
nessus 34
securityvulns 2
oraclelinux 1
veracode 2
centos 3
redhat 5
ubuntu 4
gentoo 2
osv 3
vmware 2
seebug 2
fedora 3
freebsd 3
threatpost 1
ubuntucve
ubuntucve
CVE-2008-5303
2008-12-01 00:00:00
CVE-2008-5302
2008-12-01 00:00:00
CVE-2008-2827
2008-06-23 00:00:00
debiancve
debiancve
CVE-2008-5303
2008-12-01 17:30:00
CVE-2008-5302
2008-12-01 17:30:00
CVE-2008-2827
2008-06-23 19:41:00
prion
prion
Race condition
2008-12-01 17:30:00
Race condition
2008-12-01 17:30:00
Design/Logic Flaw
2008-06-23 19:41:00
cve
cve
CVE-2008-5303
2008-12-01 17:30:00
CVE-2008-2827
2008-06-23 19:41:00
CVE-2005-0448
2005-05-02 04:00:00
openvas
openvas
Debian Security Advisory DSA 1678-1 (perl)
2008-12-10 00:00:00
Debian: Security Advisory (DSA-1678-1)
2008-12-29 00:00:00
Debian: Security Advisory (DSA-1678-1)
2008-12-10 00:00:00
debian
debian
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-03 06:15:24
[SECURITY] [DSA 1678-2] New perl packages fix regression
2008-12-21 10:04:41
[SECURITY] [DSA 696-1] New perl packages fix privilege escalation
2005-03-22 10:56:32
nessus
nessus
Debian DSA-1678-1 : perl - design flaws
2008-12-04 00:00:00
openSUSE Security Update : perl (perl-482)
2009-07-21 00:00:00
openSUSE Security Update : perl (perl-482)
2009-07-21 00:00:00
securityvulns
securityvulns
Perl symbolic links race conditions
2008-12-04 00:00:00
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-04 00:00:00
oraclelinux
oraclelinux
perl security update
2010-06-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:49:00
Denial Of Service (DoS)
2020-04-10 00:49:00
centos
centos
perl security update
2010-06-12 12:59:15
perl security update
2005-10-05 16:18:28
perl security update
2005-12-20 23:33:21
redhat
redhat
(RHSA-2010:0458) Moderate: perl security update
2010-06-07 00:00:00
(RHSA-2005:674) perl security update
2005-10-05 00:00:00
(RHSA-2005:103) perl security update
2005-02-15 00:00:00
ubuntu
ubuntu
Perl regression
2009-01-15 00:00:00
Perl vulnerabilities
2008-12-24 00:00:00
perl information leak
2004-12-21 00:00:00
gentoo
gentoo
Perl: Multiple vulnerabilities
2013-11-28 00:00:00
Perl: rmtree and DBI tmpfile vulnerabilities
2005-01-26 00:00:00
osv
osv
perl - privilege escalation
2008-12-03 00:00:00
perl - design flaw
2005-03-22 00:00:00
perl - insecure temporary files / directories
2004-12-30 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
seebug
seebug
VMware ESX Service Consoleๅคšไธชๅฎ‰ๅ…จๆผๆดž
2012-01-13 00:00:00
Perl rmtree()ๅ‡ฝๆ•ฐๆœฌๅœฐไธๅฎ‰ๅ…จๆƒ้™ๆผๆดž
2008-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-07-26 05:55:48
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-06-26 08:33:28
[SECURITY] Fedora 10 Update: perl-5.10.0-73.fc10
2009-07-16 07:33:06
freebsd
freebsd
perl -- File::Path insecure file/directory permissions
2004-12-30 00:00:00
p5-File-Path -- rmtree allows creation of setuid files
2008-11-28 00:00:00
perl -- Directory Permissions Race Condition
2005-03-09 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

6 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON
Related for CVE-2008-5302
ubuntucve5debiancve5prion3cve4openvas46debian6nessus34securityvulns2oraclelinux1veracode2centos3redhat5ubuntu4gentoo2osv3vmware2seebug2fedora3freebsd3threatpost1