(RHSA-2005:072) perl-DBI security update

2005-02-15T05:00:00
ID RHSA-2005:072
Type redhat
Reporter RedHat
Modified 2017-09-08T12:18:26

Description

DBI is a database access Application Programming Interface (API) for the Perl programming language.

The Debian Security Audit Project discovered that the DBI library creates a temporary PID file in an insecure manner. A local user could overwrite or create files as a different user who happens to run an application which uses DBI::ProxyServer. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0077 to this issue.

Users should update to this erratum package which disables the temporary PID file unless configured.