NVD

Id
70890  
Name
CVE-2004-0452  
Description
Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-21  
Modified Date
2017-07-10  
Seq
2004-0452  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
365809 70890 CVE-2004-0452 20060101-01-U  View
365810 70890 CVE-2004-0452 FLSA-2006:152845  View
365811 70890 CVE-2004-0452 20050111 [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl)  View
365812 70890 CVE-2004-0452 oval:org.mitre.oval:def:9938  View
365813 70890 CVE-2004-0452 DSA-620  View
365814 70890 CVE-2004-0452 GLSA-200501-38  View
365815 70890 CVE-2004-0452 RHSA-2005:103  View
365816 70890 CVE-2004-0452 RHSA-2005:105  View
365817 70890 CVE-2004-0452 12072  View
365818 70890 CVE-2004-0452 perl-filepathrmtree-insecure-permissions(18650)  View
365819 70890 CVE-2004-0452 USN-44-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61909 JVNDB-2005-000111 Perl の rmtree() 関数における削除するファイルやディレクトリに対し不適切なパーミッション設定をしてしまう脆弱性 ------------ CVE-2004-0452 8879 CVE-2004-0452 70890 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000111.html 2005-02-14 2013-11-01 View