NVD

Id
5080  
Name
CVE-2008-5302  
Description
Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-01  
Modified Date
2016-12-07  
Seq
2008-5302  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31746 5080 CVE-2008-5302 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905  View
31747 5080 CVE-2008-5302 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36  View
31748 5080 CVE-2008-5302 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
31749 5080 CVE-2008-5302 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
31750 5080 CVE-2008-5302 APPLE-SA-2010-03-29-1  View
31751 5080 CVE-2008-5302 SUSE-SR:2009:004  View
31752 5080 CVE-2008-5302 oval:org.mitre.oval:def:11076  View
31753 5080 CVE-2008-5302 oval:org.mitre.oval:def:6890  View
31754 5080 CVE-2008-5302 http://support.apple.com/kb/HT4077  View
31755 5080 CVE-2008-5302 http://wiki.rpath.com/Advisories:rPSA-2009-0011  View
31756 5080 CVE-2008-5302 DSA-1678  View
31757 5080 CVE-2008-5302 http://www.gossamer-threads.com/lists/perl/porters/233695#233695  View
31758 5080 CVE-2008-5302 MDVSA-2010:116  View
31759 5080 CVE-2008-5302 [oss-security] 20081128 Re: [oss-security] CVE Request - cups, dovecot-managesieve, perl, wireshark  View
31760 5080 CVE-2008-5302 RHSA-2010:0458  View
31761 5080 CVE-2008-5302 20090120 rPSA-2009-0011-1 perl  View
31762 5080 CVE-2008-5302 USN-700-1  View
31763 5080 CVE-2008-5302 USN-700-2  View
31764 5080 CVE-2008-5302 perl-filepath-symlink(47043)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47119 JVNDB-2008-002429 Perl の rmtree 関数における任意の setuid バイナリを作成される脆弱性 Perl の File::Path 1.08 または 2.07 (lib/File/Path.pm) の rmtree 関数には、任意の setuid バイナリを作成される脆弱性が存在します。 CVE-2008-5302 35415 CVE-2008-5302 5080 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002429.html 2008-12-01 2010-06-30 View