CVE-2008-5302

Common Vulnerabilities and Exposures

CVE-2008-5302 at MITRE

Details

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

Novell Bugzilla entry: 450385

SUSE Security Advisories:

SUSE-SR:2009:004, published Tue, 17 Feb 2009 10:00:00 +0000
SUSE-SR:2009:004 , published Tue, 17 Feb 2009 10:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 11.0	`perl-debuginfo >= 5.10.0-37.6` `perl-debugsource >= 5.10.0-37.6`	SAT Patch Nr: 482
openSUSE 11.0	`perl >= 5.10.0-37.6` `perl-32bit >= 5.10.0-37.6` `perl-64bit >= 5.10.0-37.6` `perl-base >= 5.10.0-37.6` `perl-doc >= 5.10.0-37.6`	SAT Patch Nr: 482
openSUSE 11.1	`perl-debuginfo >= 5.10.0-62.17.1` `perl-debuginfo-32bit >= 5.10.0-62.17.1` `perl-debuginfo-64bit >= 5.10.0-62.17.1` `perl-debugsource >= 5.10.0-62.17.1`	SAT Patch Nr: 482
openSUSE 11.1	`perl >= 5.10.0-62.17.1` `perl-32bit >= 5.10.0-62.17.1` `perl-64bit >= 5.10.0-62.17.1` `perl-base >= 5.10.0-62.17.1` `perl-base-32bit >= 5.10.0-62.17.1` `perl-base-64bit >= 5.10.0-62.17.1` `perl-doc >= 5.10.0-62.17.1`	SAT Patch Nr: 482