CVE-2008-5302

CVE-2008-5302 affects Perl 5.8.8 and 5.10.0 via the rmtree function in File::Path (lib/File/Path.pm), with a race condition that could let local users create arbitrary setuid binaries through a symlink attack. Affected versions are noted as 1.08 and 2.07; this is described as a regression relativ...

CVE-2008-5303

CVE-2008-5303 documents a race condition in File::Path’s rmtree function (lib/File/Path.pm) affecting Perl 5.8.8. The vulnerability allows local users to delete arbitrary files via a symlink attack, and is noted as a regression related to CVE-2005-0448, distinct from CVE-2008-5302 and others. The...