Race Condition Vulnerability in File::Path Module by Perl
CVE-2004-0452

Currently unrated

Key Information:

Vendor

Larry Wall

Status
Vendor
CVE Published:
21 December 2004

What is CVE-2004-0452?

A race condition exists in the rmtree function of the File::Path module in specific versions of Perl. This vulnerability can grant local users the ability to configure file and directory permissions insecurely. Exploiting this flaw through symlink attacks may enable unauthorized deletion of files or directories, as well as potential access to sensitive information. It is crucial for users and administrators to review their Perl installations and apply necessary patches to mitigate this risk.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.