CVE-2004-0452

NONE EPSS 32.5%

Published Dec 21, 200421y ago · Modified Jun 16, 20262w ago

Published Dec 21, 2004 21y ago

Last Modified Jun 16, 2026 2w ago

Description

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.

Threat Intelligence

EPSS Exploit Probability

32.5% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Affected Products 2

Vendor	Product	Version	Range
larry_wall	perl	5.6.1	any
larry_wall	perl	5.8.4	any

References 14

patches.sgi.com ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
fedoranews.org http://fedoranews.org/updates/FEDORA--.shtml
marc.info http://marc.info/?l=bugtraq&m=110547693019788&w=2
secunia.com http://secunia.com/advisories/12991
secunia.com http://secunia.com/advisories/18517
secunia.com http://secunia.com/advisories/55314
debian.org http://www.debian.org/security/2004/dsa-620

PatchVendor Advisory
gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml

PatchVendor Advisory
redhat.com http://www.redhat.com/support/errata/RHSA-2005-103.html

PatchVendor Advisory
redhat.com http://www.redhat.com/support/errata/RHSA-2005-105.html
securityfocus.com http://www.securityfocus.com/bid/12072
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/18650
oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938
ubuntu.com https://www.ubuntu.com/usn/usn-44-1/

Remediation

debian.org http://www.debian.org/security/2004/dsa-620

PatchVendor Advisory
gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml

PatchVendor Advisory
redhat.com http://www.redhat.com/support/errata/RHSA-2005-103.html

PatchVendor Advisory