Race Condition Vulnerability in Perl's rmtree Function Affecting Multiple Vendors
CVE-2005-0448

Currently unrated

Key Information:

Vendor

Larry Wall

Status
Perl
Vendor
CVE Published:
2 May 2005

What is CVE-2005-0448?

The vulnerability in Perl's rmtree function allows local users to exploit a race condition, potentially creating arbitrary setuid binaries in the directory structure being deleted. This can occur in Perl versions prior to 5.8.4 and poses a risk as it deviates from a previous vulnerability, CVE-2004-0452, highlighting unique security concerns.

References

http://www.debian.org/security/2005/dsa-696
vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/advisories/8704
vendor-advisoryx_refsource_HP
http://www.redhat.com/support/errata/RHSA-2005-881.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.