Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-5303
HistoryDec 01, 2008 - 5:30 p.m.

CVE-2008-5303

2008-12-0117:30:01
CWE-362
mitre
web.nvd.nist.gov
41
cve-2008-5303
file::path
perl 5.8.8
symlink attack
local users
race condition

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

26.5%

JSON

Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions.

Affected configurations

Nvd
Node
perlperlMatch5.8.8
AND
perlfile\Match\path1.08
VendorProductVersionCPE
perlperl5.8.8cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*
perlfile\cpe:2.3:a:perl:file\:\:path:1.08:*:*:*:*:*:*:*

References

Related

ubuntucve 5
debiancve 5
cve 4
cvelist 5
nvd 5
prion 3
debian 6
securityvulns 2
nessus 34
openvas 46
veracode 2
oraclelinux 1
redhat 5
ubuntu 4
centos 3
osv 3
gentoo 2
vmware 2
seebug 2
freebsd 3
fedora 3
exploitdb 1
threatpost 1
ubuntucve
ubuntucve
CVE-2008-5302
2008-12-01 00:00:00
CVE-2008-5303
2008-12-01 00:00:00
CVE-2008-2827
2008-06-23 00:00:00
debiancve
debiancve
CVE-2008-5303
2008-12-01 17:30:01
CVE-2008-5302
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
cve
cve
CVE-2008-5302
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
CVE-2005-0448
2005-05-02 04:00:00
cvelist
cvelist
CVE-2008-5302
2008-12-01 17:00:00
CVE-2008-5303
2008-12-01 17:00:00
CVE-2008-2827
2008-06-23 19:00:00
nvd
nvd
CVE-2008-5303
2008-12-01 17:30:01
CVE-2008-5302
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
prion
prion
Race condition
2008-12-01 17:30:00
Race condition
2008-12-01 17:30:00
Design/Logic Flaw
2008-06-23 19:41:00
debian
debian
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-03 06:15:24
[SECURITY] [DSA 1678-2] New perl packages fix regression
2008-12-21 10:04:41
[SECURITY] [DSA 696-1] New perl packages fix privilege escalation
2005-03-22 10:56:32
securityvulns
securityvulns
Perl symbolic links race conditions
2008-12-04 00:00:00
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-04 00:00:00
nessus
nessus
Debian DSA-1678-1 : perl - design flaws
2008-12-04 00:00:00
Mandriva Linux Security Advisory : perl (MDVSA-2010:116)
2010-06-14 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : libarchive-tar-perl, perl vulnerabilities (USN-700-1)
2009-04-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 1678-1 (perl)
2008-12-10 00:00:00
Debian: Security Advisory (DSA-1678-1)
2008-12-10 00:00:00
Debian: Security Advisory (DSA-1678-1)
2008-12-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:49:00
Denial Of Service (DoS)
2020-04-10 00:49:00
oraclelinux
oraclelinux
perl security update
2010-06-07 00:00:00
redhat
redhat
(RHSA-2010:0458) Moderate: perl security update
2010-06-07 00:00:00
(RHSA-2005:674) perl security update
2005-10-05 00:00:00
(RHSA-2005:103) perl security update
2005-02-15 00:00:00
ubuntu
ubuntu
Perl regression
2009-01-15 00:00:00
Perl vulnerabilities
2008-12-24 00:00:00
perl information leak
2004-12-21 00:00:00
centos
centos
perl security update
2010-06-12 12:59:15
perl security update
2005-10-05 16:18:28
perl security update
2005-12-20 23:33:21
osv
osv
perl - privilege escalation
2008-12-03 00:00:00
perl - design flaw
2005-03-22 00:00:00
perl - insecure temporary files / directories
2004-12-30 00:00:00
gentoo
gentoo
Perl: Multiple vulnerabilities
2013-11-28 00:00:00
Perl: rmtree and DBI tmpfile vulnerabilities
2005-01-26 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
seebug
seebug
VMware ESX Service Consoleๅคšไธชๅฎ‰ๅ…จๆผๆดž
2012-01-13 00:00:00
Perl rmtree()ๅ‡ฝๆ•ฐๆœฌๅœฐไธๅฎ‰ๅ…จๆƒ้™ๆผๆดž
2008-06-25 00:00:00
freebsd
freebsd
perl -- File::Path insecure file/directory permissions
2004-12-30 00:00:00
p5-File-Path -- rmtree allows creation of setuid files
2008-11-28 00:00:00
perl -- Directory Permissions Race Condition
2005-03-09 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-06-26 08:33:28
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-07-26 05:55:48
[SECURITY] Fedora 10 Update: perl-5.10.0-73.fc10
2009-07-16 07:33:06
exploitdb
exploitdb
Perl - 'rmtree()' Function Local Insecure Permissions
2008-06-23 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

26.5%

JSON
Related for CVE-2008-5303
ubuntucve5debiancve5cve4cvelist5nvd5prion3debian6securityvulns2nessus34openvas46veracode2oraclelinux1redhat5ubuntu4centos3osv3gentoo2vmware2seebug2freebsd3fedora3exploitdb1threatpost1