CVE-2005-0448
Fixed in a distro release EPSS <1%
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
Products: larry_wall perl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | perl | 5.8.4-7 |
| Debian 13 | perl | 5.8.4-7 |
| Debian 14 | perl | 5.8.4-7 |
| Debian 3.0 | perl | 5.6.1-8.9 |
| Debian 4.0 | perl | 5.8.8-7etch5 |
| Red Hat Enterprise Linux 3 | perl | 2:5.8.0-90.4 |
| Red Hat Enterprise Linux 3 | perl-CGI | 2:2.89-90.4 |
| Red Hat Enterprise Linux 3 | perl-CPAN | 2:1.61-90.4 |
| Red Hat Enterprise Linux 3 | perl-DB_File | 2:1.806-90.4 |
| Red Hat Enterprise Linux 3 | perl-suidperl | 2:5.8.0-90.4 |
| Red Hat Enterprise Linux 4 | perl | 3:5.8.5-16.RHEL4 |
| Red Hat Enterprise Linux 4 | perl-debuginfo | 3:5.8.5-16.RHEL4 |
| Red Hat Enterprise Linux 4 | perl-suidperl | 3:5.8.5-16.RHEL4 |