Lucene search

K
redhatRedHatRHSA-2005:072
HistoryFeb 15, 2005 - 12:00 a.m.

(RHSA-2005:072) perl-DBI security update

2005-02-1500:00:00
access.redhat.com
19

EPSS

0

Percentile

5.1%

DBI is a database access Application Programming Interface (API) for
the Perl programming language.

The Debian Security Audit Project discovered that the DBI library creates a
temporary PID file in an insecure manner. A local user could overwrite or
create files as a different user who happens to run an application which
uses DBI::ProxyServer. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0077 to this issue.

Users should update to this erratum package which disables the temporary
PID file unless configured.