CVE-2005-0448

Description

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.

Affected products

• larry_wall / perl5.8.0 – 5.8.0
• larry_wall / perl5.8.1 – 5.8.1
• larry_wall / perl5.8.3 – 5.8.3
• larry_wall / perl5.8.4 – 5.8.4

References

• VENDOR_ADVISORYhttp://www.debian.org/security/2005/dsa-696
• VENDOR_ADVISORYhttp://www.securityfocus.com/advisories/8704
• MISChttp://www.redhat.com/support/errata/RHSA-2005-881.html
• VENDOR_ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:079
• VENDOR_ADVISORYhttp://secunia.com/advisories/55314
• VENDOR_ADVISORYhttp://secunia.com/advisories/18075
• MISChttp://www.securityfocus.com/bid/12767
• MISChttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475
• VENDOR_ADVISORYftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
• MISChttp://fedoranews.org/updates/FEDORA--.shtml
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200501-38.xml
• VENDOR_ADVISORYhttp://secunia.com/advisories/18517
• MISChttp://www.redhat.com/support/errata/RHSA-2005-674.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/17079
• VENDOR_ADVISORYhttp://secunia.com/advisories/14531
• VENDOR_ADVISORYhttps://usn.ubuntu.com/94-1/
• VENDOR_ADVISORYhttp://www.securityfocus.com/advisories/8704