Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-4114
HistoryJan 13, 2012 - 6:55 p.m.

CVE-2011-4114

2012-01-1318:55:03
CWE-264
[email protected]
web.nvd.nist.gov

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program. NOTE: a similar vulnerability was reported for PAR, but this has been assigned a different CVE identifier.

Affected configurations

NVD
Node
roderich_schupppar-packer_moduleRange≤1.011
OR
roderich_schupppar-packer_moduleMatch0.63
OR
roderich_schupppar-packer_moduleMatch0.64
OR
roderich_schupppar-packer_moduleMatch0.65
OR
roderich_schupppar-packer_moduleMatch0.66
OR
roderich_schupppar-packer_moduleMatch0.67
OR
roderich_schupppar-packer_moduleMatch0.68
OR
roderich_schupppar-packer_moduleMatch0.69
OR
roderich_schupppar-packer_moduleMatch0.70
OR
roderich_schupppar-packer_moduleMatch0.71
OR
roderich_schupppar-packer_moduleMatch0.72
OR
roderich_schupppar-packer_moduleMatch0.73
OR
roderich_schupppar-packer_moduleMatch0.74
OR
roderich_schupppar-packer_moduleMatch0.75
OR
roderich_schupppar-packer_moduleMatch0.76
OR
roderich_schupppar-packer_moduleMatch0.77
OR
roderich_schupppar-packer_moduleMatch0.78
OR
roderich_schupppar-packer_moduleMatch0.79
OR
roderich_schupppar-packer_moduleMatch0.80
OR
roderich_schupppar-packer_moduleMatch0.81
OR
roderich_schupppar-packer_moduleMatch0.82
OR
roderich_schupppar-packer_moduleMatch0.83
OR
roderich_schupppar-packer_moduleMatch0.85
OR
roderich_schupppar-packer_moduleMatch0.86
OR
roderich_schupppar-packer_moduleMatch0.87
OR
roderich_schupppar-packer_moduleMatch0.88
OR
roderich_schupppar-packer_moduleMatch0.89
OR
roderich_schupppar-packer_moduleMatch0.90
OR
roderich_schupppar-packer_moduleMatch0.91
OR
roderich_schupppar-packer_moduleMatch0.92
OR
roderich_schupppar-packer_moduleMatch0.93
OR
roderich_schupppar-packer_moduleMatch0.94
OR
roderich_schupppar-packer_moduleMatch0.941
OR
roderich_schupppar-packer_moduleMatch0.942
OR
roderich_schupppar-packer_moduleMatch0.951
OR
roderich_schupppar-packer_moduleMatch0.952
OR
roderich_schupppar-packer_moduleMatch0.953
OR
roderich_schupppar-packer_moduleMatch0.954
OR
roderich_schupppar-packer_moduleMatch0.955
OR
roderich_schupppar-packer_moduleMatch0.956
OR
roderich_schupppar-packer_moduleMatch0.957
OR
roderich_schupppar-packer_moduleMatch0.958
OR
roderich_schupppar-packer_moduleMatch0.959
OR
roderich_schupppar-packer_moduleMatch0.960
OR
roderich_schupppar-packer_moduleMatch0.970
OR
roderich_schupppar-packer_moduleMatch0.973
OR
roderich_schupppar-packer_moduleMatch0.975
OR
roderich_schupppar-packer_moduleMatch0.976
OR
roderich_schupppar-packer_moduleMatch0.977
OR
roderich_schupppar-packer_moduleMatch0.978
OR
roderich_schupppar-packer_moduleMatch0.979
OR
roderich_schupppar-packer_moduleMatch0.980
OR
roderich_schupppar-packer_moduleMatch0.981
OR
roderich_schupppar-packer_moduleMatch0.982
OR
roderich_schupppar-packer_moduleMatch0.991
OR
roderich_schupppar-packer_moduleMatch0.992_01
OR
roderich_schupppar-packer_moduleMatch0.992_02
OR
roderich_schupppar-packer_moduleMatch0.992_03
OR
roderich_schupppar-packer_moduleMatch0.992_04
OR
roderich_schupppar-packer_moduleMatch0.992_05
OR
roderich_schupppar-packer_moduleMatch0.992_06
OR
roderich_schupppar-packer_moduleMatch1.000
OR
roderich_schupppar-packer_moduleMatch1.001
OR
roderich_schupppar-packer_moduleMatch1.002
OR
roderich_schupppar-packer_moduleMatch1.003
OR
roderich_schupppar-packer_moduleMatch1.004
OR
roderich_schupppar-packer_moduleMatch1.005
OR
roderich_schupppar-packer_moduleMatch1.006
OR
roderich_schupppar-packer_moduleMatch1.007
OR
roderich_schupppar-packer_moduleMatch1.008
OR
roderich_schupppar-packer_moduleMatch1.009
OR
roderich_schupppar-packer_moduleMatch1.010

Related

nessus 2
openvas 12
prion 2
fedora 4
debiancve 2
cvelist 2
cve 2
ubuntucve 2
nvd 1
nessus
nessus
Fedora 16 : perl-PAR-1.002-5.fc16 / perl-PAR-Packer-1.010-3.fc16 (2011-16856)
2011-12-22 00:00:00
Fedora 15 : perl-PAR-1.002-4.fc15 / perl-PAR-Packer-1.008-4.fc15 (2011-16859)
2011-12-22 00:00:00
openvas
openvas
Fedora Update for perl-PAR FEDORA-2011-16856
2012-04-02 00:00:00
Fedora Update for perl-PAR FEDORA-2011-16859
2011-12-23 00:00:00
Fedora Update for perl-PAR FEDORA-2011-16856
2012-04-02 00:00:00
prion
prion
Code injection
2012-01-13 18:55:00
Code injection
2012-01-13 19:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: perl-PAR-Packer-1.010-3.fc16
2011-12-21 16:58:35
[SECURITY] Fedora 15 Update: perl-PAR-1.002-4.fc15
2011-12-21 16:57:05
[SECURITY] Fedora 15 Update: perl-PAR-Packer-1.008-4.fc15
2011-12-21 16:57:05
debiancve
debiancve
CVE-2011-4114
2012-01-13 18:55:03
CVE-2011-5060
2012-01-13 19:55:01
cvelist
cvelist
CVE-2011-4114
2012-01-13 18:00:00
CVE-2011-5060
2012-01-13 19:00:00
cve
cve
CVE-2011-4114
2012-01-13 18:55:03
CVE-2011-5060
2012-01-13 19:55:01
ubuntucve
ubuntucve
CVE-2011-4114
2012-01-13 00:00:00
CVE-2011-5060
2012-01-13 00:00:00
nvd
nvd
CVE-2011-5060
2012-01-13 19:55:01

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2011-4114
nessus2openvas12prion2fedora4debiancve2cvelist2cve2ubuntucve2nvd1