Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Perl | Larry_wall | 5.6.1 (including) | 5.6.1 (including) |
| Perl | Larry_wall | 5.8.4 (including) | 5.8.4 (including) |
| Red Hat Enterprise Linux 3 | RedHat | perl-2:5.8.0-89.10 | * |
| Red Hat Enterprise Linux 4 | RedHat | perl-3:5.8.5-12.1 | * |
| Perl | Ubuntu | dapper | * |
| Perl | Ubuntu | devel | * |
| Perl | Ubuntu | edgy | * |
| Perl | Ubuntu | feisty | * |