CVE-2008-5302

🗓️ 01 Dec 2008 17:30:00Reported by ubuntu.comType

ubuntucve

ubuntucve🔗 ubuntu.com👁 22 Views

Race condition in File::Path 1.08 and 2.07 allowing symlink attack to create setuid binarie

Reporter	Title	Published	Views	Family All 67
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 5 : perl (CESA-2010:0458)	14 Jun 201000:00	–	nessus
Tenable Nessus	Debian DSA-1678-1 : perl - design flaws	4 Dec 200800:00	–	nessus
Tenable Nessus	GLSA-201311-17 : Perl: Multiple vulnerabilities	29 Nov 201300:00	–	nessus
Tenable Nessus	Mac OS X Multiple Vulnerabilities (Security Update 2010-002)	29 Mar 201000:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : perl (MDVSA-2010:116)	14 Jun 201000:00	–	nessus
Tenable Nessus	MiracleLinux 3 : perl-5.8.8-32.1.0.1.AXS3 (AXSA:2010-362:02)	14 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 5 : perl (ELSA-2010-0458)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 5 : perl (RHSA-2010:0458)	8 Jun 201000:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : perl on SL5.x i386/x86_64	1 Aug 201200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	7.10	any	perl	5.8.8-7ubuntu3.4	perl_5.8.8-7ubuntu3.4_any.deb
Ubuntu	8.04	any	perl	5.8.8-12ubuntu0.3	perl_5.8.8-12ubuntu0.3_any.deb
Ubuntu	8.10	any	perl	5.10.0-11.1ubuntu2.2	perl_5.10.0-11.1ubuntu2.2_any.deb

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-700-1
cve	www.cve.org/CVERecord

24 Jul 2024 15:57Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.9

EPSS0.00047

race condition file::path symlink attack setuid binaries perl regression cve-2008-5302 unix