Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Perl | Larry_wall | 5.8.4 | 5.8.4 |
Perl | Larry_wall | 5.6.1 | 5.6.1 |
Perl | Ubuntu | dapper | * |
Perl | Ubuntu | devel | * |
Perl | Ubuntu | edgy | * |
Perl | Ubuntu | feisty | * |