Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade perl | Jul 30, 2024 | May 2, 2005 |
| Freebsd | — | Upgrade perlUpgrade p5-File-Path | Dec 10, 2025 | Feb 3, 2009 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade dev-perl/DBI. | Oct 30, 2017 | May 2, 2005 |
| Hpux | — | Apply the remediation from HP for CVE-2005-0448 | Aug 11, 2017 | May 2, 2005 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.1.11.0.3.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.11.0.3.2 on Solaris 11.1 | May 29, 2017 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub