Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-5302
HistoryDec 01, 2008 - 5:30 p.m.

CVE-2008-5302

2008-12-0117:30:01
CWE-362
[email protected]
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.6%

JSON

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

Affected configurations

NVD
Node
perlperlMatch5.8.8
OR
perlperlMatch5.10.0
AND
perlfile\Match\path1.08
OR
perlfile\Match\path2.07

References

Related

nvd 4
debiancve 5
cve 5
ubuntucve 5
cvelist 5
prion 3
nessus 34
debian 6
securityvulns 2
openvas 46
osv 3
oraclelinux 1
gentoo 2
redhat 5
ubuntu 4
centos 3
veracode 2
seebug 2
fedora 3
freebsd 3
vmware 2
threatpost 1
nvd
nvd
CVE-2008-5303
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
CVE-2005-0448
2005-05-02 04:00:00
debiancve
debiancve
CVE-2008-5302
2008-12-01 17:30:01
CVE-2008-5303
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
cve
cve
CVE-2008-5302
2008-12-01 17:30:01
CVE-2008-5303
2008-12-01 17:30:01
CVE-2008-2827
2008-06-23 19:41:00
ubuntucve
ubuntucve
CVE-2008-5302
2008-12-01 00:00:00
CVE-2008-5303
2008-12-01 00:00:00
CVE-2008-2827
2008-06-23 00:00:00
cvelist
cvelist
CVE-2008-5302
2008-12-01 17:00:00
CVE-2008-5303
2008-12-01 17:00:00
CVE-2008-2827
2008-06-23 19:00:00
prion
prion
Race condition
2008-12-01 17:30:00
Race condition
2008-12-01 17:30:00
Design/Logic Flaw
2008-06-23 19:41:00
nessus
nessus
Debian DSA-1678-1 : perl - design flaws
2008-12-04 00:00:00
GLSA-200501-38 : Perl: rmtree and DBI tmpfile vulnerabilities
2005-02-14 00:00:00
CentOS 5 : perl (CESA-2010:0458)
2010-06-14 00:00:00
debian
debian
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-03 06:15:24
[SECURITY] [DSA 1678-2] New perl packages fix regression
2008-12-21 10:04:41
[SECURITY] [DSA 696-1] New perl packages fix privilege escalation
2005-03-22 10:56:32
securityvulns
securityvulns
Perl symbolic links race conditions
2008-12-04 00:00:00
[SECURITY] [DSA 1678-1] New perl packages fix privilege escalation
2008-12-04 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1678-1)
2008-12-29 00:00:00
Debian: Security Advisory (DSA-1678-1)
2008-12-10 00:00:00
Debian Security Advisory DSA 1678-1 (perl)
2008-12-10 00:00:00
osv
osv
perl - privilege escalation
2008-12-03 00:00:00
perl - design flaw
2005-03-22 00:00:00
perl - insecure temporary files / directories
2004-12-30 00:00:00
oraclelinux
oraclelinux
perl security update
2010-06-07 00:00:00
gentoo
gentoo
Perl: rmtree and DBI tmpfile vulnerabilities
2005-01-26 00:00:00
Perl: Multiple vulnerabilities
2013-11-28 00:00:00
redhat
redhat
(RHSA-2010:0458) Moderate: perl security update
2010-06-07 00:00:00
(RHSA-2005:674) perl security update
2005-10-05 00:00:00
(RHSA-2005:103) perl security update
2005-02-15 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2008-12-24 00:00:00
Perl regression
2009-01-15 00:00:00
perl information leak
2004-12-21 00:00:00
centos
centos
perl security update
2010-06-12 12:59:15
perl security update
2005-10-05 16:18:28
perl security update
2005-12-20 23:33:21
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:49:00
Denial Of Service (DoS)
2020-04-10 00:49:00
seebug
seebug
Perl rmtree()ๅ‡ฝๆ•ฐๆœฌๅœฐไธๅฎ‰ๅ…จๆƒ้™ๆผๆดž
2008-06-25 00:00:00
VMware ESX Service Consoleๅคšไธชๅฎ‰ๅ…จๆผๆดž
2012-01-13 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-07-26 05:55:48
[SECURITY] Fedora 9 Update: perl-5.10.0-27.fc9
2008-06-26 08:33:28
[SECURITY] Fedora 10 Update: perl-5.10.0-73.fc10
2009-07-16 07:33:06
freebsd
freebsd
perl -- Directory Permissions Race Condition
2005-03-09 00:00:00
p5-File-Path -- rmtree allows creation of setuid files
2008-11-28 00:00:00
perl -- File::Path insecure file/directory permissions
2004-12-30 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.6%

JSON
Related for NVD:CVE-2008-5302
nvd4debiancve5cve5ubuntucve5cvelist5prion3nessus34debian6securityvulns2openvas46osv3oraclelinux1gentoo2redhat5ubuntu4centos3veracode2seebug2fedora3freebsd3vmware2threatpost1