Lucene search

K
freebsdFreeBSD13B0C8C8-BEE0-11DD-A708-001FC66E7203
HistoryNov 28, 2008 - 12:00 a.m.

p5-File-Path -- rmtree allows creation of setuid files

2008-11-2800:00:00
vuxml.freebsd.org
8

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.7%

Jan Lieskovsky reports:

perl-File-Path rmtree race condition (CVE-2005-0448 was assigned to
address this)
This vulnerability was fixed in 5.8.4-7 but re-introduced
in 5.8.8-1. It’s also present in File::Path 2.xx, up to and
including 2.07 which has only a partial fix.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchp5-file-path< 2.07_1UNKNOWN

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:H/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

25.7%