Mandrake Linux Security Advisory : perl (MDKSA-2005:031)

Jeroen van Wolffelaar discovered that the rmtree function in the perl File::Path module would remove directories in an insecure manner which could lead to the removal of arbitrary files and directories via a symlink attack CVE-2004-0452. Trustix developers discovered several insecure uses of...

[SA14120] Perl "PERLIO_DEBUG" Privilege Escalation Vulnerabilities

TITLE: Perl "PERLIODEBUG" Privilege Escalation Vulnerabilities SECUNIA ADVISORY ID: SA14120 VERIFY ADVISORY: http://secunia.com/advisories/14120/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Perl 5.x http://secunia.com/product/2647/ DESCRIPTION: Kevin...

USN-72-1: Perl vulnerabilities

Two exploitable vulnerabilities involving setuid-enabled perl scripts have been discovered. The package "perl-suid" provides a wrapper around perl which allows to use setuid-root perl scripts, i.e. user-callable Perl scripts which have full root privileges. Previous versions allowed users to...

perl -- vulnerabilities in PERLIO_DEBUG handling

Kevin Finisterre discovered bugs in perl's I/O debug support: The environmental variable PERLIODEBUG is honored even by the set-user-ID perl command usually named sperl or suidperl. As a result, a local attacker may be able to gain elevated privileges. CVE-2005-0155 A buffer overflow may occur in...

Perl: rmtree and DBI tmpfile vulnerabilities

Background Perl is a cross platform programming language. The DBI is the standard database interface module for Perl. Description Javier Fernandez-Sanguino Pena discovered that the DBI library creates temporary files in an insecure, predictable way CAN-2005-0077. Paul Szabo found out that...

Debian DSA-620-1 : perl - insecure temporary files / directories

Several vulnerabilities have been discovered in Perl, the popular scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-0452 Jeroen van Wolffelaar discovered that the rmtree function in the File::Path module removes directory trees in ...

[SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 620-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...

CVE-2004-0452

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack...

USN-16-1: perl vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the perl package. The utility "instmodsh", the Perl package "PPPort.pm", and several test scripts which are not shipped and only used during build created temporary files in an insecure way, which could allow a symlink attack to...