Description

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452.

Remediation

References

CVE-2008-2827

Related Vulnerabilities

WordPress Plugin WP Taxonomy Import Cross-Site Scripting (1.0.4)

Internet Information Services Other Vulnerability (CVE-2002-0224)

IBMHttpServer Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-4947)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29516)

WordPress Plugin Simple Share Buttons Adder Multiple Vulnerabilities (4.4)

Severity

Medium

Classification

CVE-2008-2827 CWE-264

Tags

Missing Update Known Vulnerabilities