Read the docs
TI-2011-03632 Aliases CVE-2011-4114GHSA-gxwf-286g-rc8g

The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates…

Priority LOW 16CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program. NOTE: a similar vulnerability was reported for PAR, but this has been assigned a different CVE identifier.

Why it matters now

EPSS 0.00329 26th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 72

CPEVersionsRoleVendor
cpe:2.3:a:roderich_schupp:par-packer_module:*:*:*:*:*:*:*:*up to 1.011VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.63:*:*:*:*:*:*:*0.63VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.64:*:*:*:*:*:*:*0.64VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.65:*:*:*:*:*:*:*0.65VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.66:*:*:*:*:*:*:*0.66VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.67:*:*:*:*:*:*:*0.67VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.68:*:*:*:*:*:*:*0.68VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.69:*:*:*:*:*:*:*0.69VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.70:*:*:*:*:*:*:*0.70VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.71:*:*:*:*:*:*:*0.71VulnerableRoderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:*:*:*:*:*:*:*:* Versions up to 1.011 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.63:*:*:*:*:*:*:* Versions 0.63 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.64:*:*:*:*:*:*:* Versions 0.64 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.65:*:*:*:*:*:*:* Versions 0.65 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.66:*:*:*:*:*:*:* Versions 0.66 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.67:*:*:*:*:*:*:* Versions 0.67 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.68:*:*:*:*:*:*:* Versions 0.68 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.69:*:*:*:*:*:*:* Versions 0.69 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.70:*:*:*:*:*:*:* Versions 0.70 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.71:*:*:*:*:*:*:* Versions 0.71 Vulnerable ·Roderich Schupp
Show 62 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:roderich_schupp:par-packer_module:0.72:*:*:*:*:*:*:*0.72VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.73:*:*:*:*:*:*:*0.73VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.74:*:*:*:*:*:*:*0.74VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.75:*:*:*:*:*:*:*0.75VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.76:*:*:*:*:*:*:*0.76VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.77:*:*:*:*:*:*:*0.77VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.78:*:*:*:*:*:*:*0.78VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.79:*:*:*:*:*:*:*0.79VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.80:*:*:*:*:*:*:*0.80VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.81:*:*:*:*:*:*:*0.81VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.82:*:*:*:*:*:*:*0.82VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.83:*:*:*:*:*:*:*0.83VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.85:*:*:*:*:*:*:*0.85VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.86:*:*:*:*:*:*:*0.86VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.87:*:*:*:*:*:*:*0.87VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.88:*:*:*:*:*:*:*0.88VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.89:*:*:*:*:*:*:*0.89VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.90:*:*:*:*:*:*:*0.90VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.91:*:*:*:*:*:*:*0.91VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.92:*:*:*:*:*:*:*0.92VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.93:*:*:*:*:*:*:*0.93VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.94:*:*:*:*:*:*:*0.94VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.941:*:*:*:*:*:*:*0.941VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.942:*:*:*:*:*:*:*0.942VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.951:*:*:*:*:*:*:*0.951VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.952:*:*:*:*:*:*:*0.952VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.953:*:*:*:*:*:*:*0.953VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.954:*:*:*:*:*:*:*0.954VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.955:*:*:*:*:*:*:*0.955VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.956:*:*:*:*:*:*:*0.956VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.957:*:*:*:*:*:*:*0.957VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.958:*:*:*:*:*:*:*0.958VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.959:*:*:*:*:*:*:*0.959VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.960:*:*:*:*:*:*:*0.960VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.970:*:*:*:*:*:*:*0.970VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.973:*:*:*:*:*:*:*0.973VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.975:*:*:*:*:*:*:*0.975VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.976:*:*:*:*:*:*:*0.976VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.977:*:*:*:*:*:*:*0.977VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.978:*:*:*:*:*:*:*0.978VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.979:*:*:*:*:*:*:*0.979VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.980:*:*:*:*:*:*:*0.980VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.981:*:*:*:*:*:*:*0.981VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.982:*:*:*:*:*:*:*0.982VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.991:*:*:*:*:*:*:*0.991VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_01:*:*:*:*:*:*:*0.992_01VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_02:*:*:*:*:*:*:*0.992_02VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_03:*:*:*:*:*:*:*0.992_03VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_04:*:*:*:*:*:*:*0.992_04VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_05:*:*:*:*:*:*:*0.992_05VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_06:*:*:*:*:*:*:*0.992_06VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.000:*:*:*:*:*:*:*1.000VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.001:*:*:*:*:*:*:*1.001VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.002:*:*:*:*:*:*:*1.002VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.003:*:*:*:*:*:*:*1.003VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.004:*:*:*:*:*:*:*1.004VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.005:*:*:*:*:*:*:*1.005VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.006:*:*:*:*:*:*:*1.006VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.007:*:*:*:*:*:*:*1.007VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.008:*:*:*:*:*:*:*1.008VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.009:*:*:*:*:*:*:*1.009VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.010:*:*:*:*:*:*:*1.010VulnerableRoderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.72:*:*:*:*:*:*:* Versions 0.72 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.73:*:*:*:*:*:*:* Versions 0.73 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.74:*:*:*:*:*:*:* Versions 0.74 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.75:*:*:*:*:*:*:* Versions 0.75 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.76:*:*:*:*:*:*:* Versions 0.76 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.77:*:*:*:*:*:*:* Versions 0.77 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.78:*:*:*:*:*:*:* Versions 0.78 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.79:*:*:*:*:*:*:* Versions 0.79 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.81:*:*:*:*:*:*:* Versions 0.81 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.82:*:*:*:*:*:*:* Versions 0.82 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.83:*:*:*:*:*:*:* Versions 0.83 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.85:*:*:*:*:*:*:* Versions 0.85 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.86:*:*:*:*:*:*:* Versions 0.86 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.87:*:*:*:*:*:*:* Versions 0.87 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.88:*:*:*:*:*:*:* Versions 0.88 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.89:*:*:*:*:*:*:* Versions 0.89 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.941:*:*:*:*:*:*:* Versions 0.941 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.942:*:*:*:*:*:*:* Versions 0.942 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.951:*:*:*:*:*:*:* Versions 0.951 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.952:*:*:*:*:*:*:* Versions 0.952 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.953:*:*:*:*:*:*:* Versions 0.953 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.954:*:*:*:*:*:*:* Versions 0.954 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.955:*:*:*:*:*:*:* Versions 0.955 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.956:*:*:*:*:*:*:* Versions 0.956 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.957:*:*:*:*:*:*:* Versions 0.957 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.958:*:*:*:*:*:*:* Versions 0.958 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.959:*:*:*:*:*:*:* Versions 0.959 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.960:*:*:*:*:*:*:* Versions 0.960 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.970:*:*:*:*:*:*:* Versions 0.970 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.973:*:*:*:*:*:*:* Versions 0.973 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.975:*:*:*:*:*:*:* Versions 0.975 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.976:*:*:*:*:*:*:* Versions 0.976 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.977:*:*:*:*:*:*:* Versions 0.977 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.978:*:*:*:*:*:*:* Versions 0.978 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.979:*:*:*:*:*:*:* Versions 0.979 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.980:*:*:*:*:*:*:* Versions 0.980 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.981:*:*:*:*:*:*:* Versions 0.981 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.982:*:*:*:*:*:*:* Versions 0.982 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.991:*:*:*:*:*:*:* Versions 0.991 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_01:*:*:*:*:*:*:* Versions 0.992_01 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_02:*:*:*:*:*:*:* Versions 0.992_02 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_03:*:*:*:*:*:*:* Versions 0.992_03 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_04:*:*:*:*:*:*:* Versions 0.992_04 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_05:*:*:*:*:*:*:* Versions 0.992_05 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_06:*:*:*:*:*:*:* Versions 0.992_06 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.000:*:*:*:*:*:*:* Versions 1.000 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.001:*:*:*:*:*:*:* Versions 1.001 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.002:*:*:*:*:*:*:* Versions 1.002 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.003:*:*:*:*:*:*:* Versions 1.003 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.004:*:*:*:*:*:*:* Versions 1.004 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.005:*:*:*:*:*:*:* Versions 1.005 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.006:*:*:*:*:*:*:* Versions 1.006 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.007:*:*:*:*:*:*:* Versions 1.007 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.008:*:*:*:*:*:*:* Versions 1.008 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.009:*:*:*:*:*:*:* Versions 1.009 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.010:*:*:*:*:*:*:* Versions 1.010 Vulnerable ·Roderich Schupp

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4114
  2. 2026-10-03 Alias added: GHSA-gxwf-286g-rc8g

References

Patch 2

Advisory 1

Other 3

  • TI-2011-04337 The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files… CVSS 2.0LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences