Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Perl | Larry_wall | 5.8.0 (including) | 5.8.0 (including) |
| Perl | Larry_wall | 5.8.1 (including) | 5.8.1 (including) |
| Perl | Larry_wall | 5.8.3 (including) | 5.8.3 (including) |
| Perl | Larry_wall | 5.8.4 (including) | 5.8.4 (including) |
| Red Hat Enterprise Linux 3 | RedHat | perl-2:5.8.0-90.4 | * |
| Red Hat Enterprise Linux 4 | RedHat | perl-3:5.8.5-16.RHEL4 | * |
| Perl | Ubuntu | dapper | * |
| Perl | Ubuntu | devel | * |
| Perl | Ubuntu | edgy | * |
| Perl | Ubuntu | feisty | * |