Red Hat Security AdvisoryRHSA-2010:0458
perl security update
Released 2010-06-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-32.el5_5.1, perl-4:5.8.8-32.el5_5.1.i386, perl-4:5.8.8-32.el5_5.1.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-4:5.8.8-32.el5_5.1, perl-4:5.8.8-32.el5_5.1.i386, perl-suidperl-4:5.8.8-32.el5_5.1 +1
Fixes 4 records
Priority MEDIUM 42
The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 B…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.02797 · Published 2010-05-19 · Fixed CWE-264
Priority LOW 39
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03715 · Published 2010-06-21 · Fixed CWE-264
Priority LOW 30
Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452,…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00332 · Published 2008-12-01 · Fixed CWE-362
Priority LOW 30
Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CV…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00332 · Published 2008-12-01 · Fixed CWE-362