Read the docs
TI-2011-04337 Aliases CVE-2011-5060GHSA-hmhv-64cw-2g3m

The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files…

Priority LOW 16CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.

Why it matters now

EPSS 0.00287 21st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 63

CPEVersionsRoleVendor
cpe:2.3:a:roderich_schupp:par-packer_module:*:*:*:*:*:*:*:*up to 1.002VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.63:*:*:*:*:*:*:*0.63VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.64:*:*:*:*:*:*:*0.64VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.65:*:*:*:*:*:*:*0.65VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.66:*:*:*:*:*:*:*0.66VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.67:*:*:*:*:*:*:*0.67VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.68:*:*:*:*:*:*:*0.68VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.69:*:*:*:*:*:*:*0.69VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.70:*:*:*:*:*:*:*0.70VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.71:*:*:*:*:*:*:*0.71VulnerableRoderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:*:*:*:*:*:*:*:* Versions up to 1.002 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.63:*:*:*:*:*:*:* Versions 0.63 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.64:*:*:*:*:*:*:* Versions 0.64 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.65:*:*:*:*:*:*:* Versions 0.65 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.66:*:*:*:*:*:*:* Versions 0.66 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.67:*:*:*:*:*:*:* Versions 0.67 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.68:*:*:*:*:*:*:* Versions 0.68 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.69:*:*:*:*:*:*:* Versions 0.69 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.70:*:*:*:*:*:*:* Versions 0.70 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.71:*:*:*:*:*:*:* Versions 0.71 Vulnerable ·Roderich Schupp
Show 53 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:roderich_schupp:par-packer_module:0.72:*:*:*:*:*:*:*0.72VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.73:*:*:*:*:*:*:*0.73VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.74:*:*:*:*:*:*:*0.74VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.75:*:*:*:*:*:*:*0.75VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.76:*:*:*:*:*:*:*0.76VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.77:*:*:*:*:*:*:*0.77VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.78:*:*:*:*:*:*:*0.78VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.79:*:*:*:*:*:*:*0.79VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.80:*:*:*:*:*:*:*0.80VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.81:*:*:*:*:*:*:*0.81VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.82:*:*:*:*:*:*:*0.82VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.83:*:*:*:*:*:*:*0.83VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.85:*:*:*:*:*:*:*0.85VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.86:*:*:*:*:*:*:*0.86VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.87:*:*:*:*:*:*:*0.87VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.88:*:*:*:*:*:*:*0.88VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.89:*:*:*:*:*:*:*0.89VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.90:*:*:*:*:*:*:*0.90VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.91:*:*:*:*:*:*:*0.91VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.92:*:*:*:*:*:*:*0.92VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.93:*:*:*:*:*:*:*0.93VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.94:*:*:*:*:*:*:*0.94VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.941:*:*:*:*:*:*:*0.941VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.942:*:*:*:*:*:*:*0.942VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.951:*:*:*:*:*:*:*0.951VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.952:*:*:*:*:*:*:*0.952VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.953:*:*:*:*:*:*:*0.953VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.954:*:*:*:*:*:*:*0.954VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.955:*:*:*:*:*:*:*0.955VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.956:*:*:*:*:*:*:*0.956VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.957:*:*:*:*:*:*:*0.957VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.958:*:*:*:*:*:*:*0.958VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.959:*:*:*:*:*:*:*0.959VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.960:*:*:*:*:*:*:*0.960VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.970:*:*:*:*:*:*:*0.970VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.973:*:*:*:*:*:*:*0.973VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.975:*:*:*:*:*:*:*0.975VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.976:*:*:*:*:*:*:*0.976VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.977:*:*:*:*:*:*:*0.977VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.978:*:*:*:*:*:*:*0.978VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.979:*:*:*:*:*:*:*0.979VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.980:*:*:*:*:*:*:*0.980VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.981:*:*:*:*:*:*:*0.981VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.982:*:*:*:*:*:*:*0.982VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.991:*:*:*:*:*:*:*0.991VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_01:*:*:*:*:*:*:*0.992_01VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_02:*:*:*:*:*:*:*0.992_02VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_03:*:*:*:*:*:*:*0.992_03VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_04:*:*:*:*:*:*:*0.992_04VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_05:*:*:*:*:*:*:*0.992_05VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:0.992_06:*:*:*:*:*:*:*0.992_06VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.000:*:*:*:*:*:*:*1.000VulnerableRoderich Schupp
cpe:2.3:a:roderich_schupp:par-packer_module:1.001:*:*:*:*:*:*:*1.001VulnerableRoderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.72:*:*:*:*:*:*:* Versions 0.72 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.73:*:*:*:*:*:*:* Versions 0.73 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.74:*:*:*:*:*:*:* Versions 0.74 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.75:*:*:*:*:*:*:* Versions 0.75 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.76:*:*:*:*:*:*:* Versions 0.76 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.77:*:*:*:*:*:*:* Versions 0.77 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.78:*:*:*:*:*:*:* Versions 0.78 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.79:*:*:*:*:*:*:* Versions 0.79 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.81:*:*:*:*:*:*:* Versions 0.81 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.82:*:*:*:*:*:*:* Versions 0.82 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.83:*:*:*:*:*:*:* Versions 0.83 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.85:*:*:*:*:*:*:* Versions 0.85 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.86:*:*:*:*:*:*:* Versions 0.86 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.87:*:*:*:*:*:*:* Versions 0.87 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.88:*:*:*:*:*:*:* Versions 0.88 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.89:*:*:*:*:*:*:* Versions 0.89 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.941:*:*:*:*:*:*:* Versions 0.941 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.942:*:*:*:*:*:*:* Versions 0.942 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.951:*:*:*:*:*:*:* Versions 0.951 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.952:*:*:*:*:*:*:* Versions 0.952 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.953:*:*:*:*:*:*:* Versions 0.953 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.954:*:*:*:*:*:*:* Versions 0.954 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.955:*:*:*:*:*:*:* Versions 0.955 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.956:*:*:*:*:*:*:* Versions 0.956 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.957:*:*:*:*:*:*:* Versions 0.957 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.958:*:*:*:*:*:*:* Versions 0.958 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.959:*:*:*:*:*:*:* Versions 0.959 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.960:*:*:*:*:*:*:* Versions 0.960 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.970:*:*:*:*:*:*:* Versions 0.970 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.973:*:*:*:*:*:*:* Versions 0.973 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.975:*:*:*:*:*:*:* Versions 0.975 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.976:*:*:*:*:*:*:* Versions 0.976 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.977:*:*:*:*:*:*:* Versions 0.977 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.978:*:*:*:*:*:*:* Versions 0.978 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.979:*:*:*:*:*:*:* Versions 0.979 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.980:*:*:*:*:*:*:* Versions 0.980 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.981:*:*:*:*:*:*:* Versions 0.981 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.982:*:*:*:*:*:*:* Versions 0.982 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.991:*:*:*:*:*:*:* Versions 0.991 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_01:*:*:*:*:*:*:* Versions 0.992_01 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_02:*:*:*:*:*:*:* Versions 0.992_02 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_03:*:*:*:*:*:*:* Versions 0.992_03 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_04:*:*:*:*:*:*:* Versions 0.992_04 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_05:*:*:*:*:*:*:* Versions 0.992_05 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:0.992_06:*:*:*:*:*:*:* Versions 0.992_06 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.000:*:*:*:*:*:*:* Versions 1.000 Vulnerable ·Roderich Schupp
  • cpe:2.3:a:roderich_schupp:par-packer_module:1.001:*:*:*:*:*:*:* Versions 1.001 Vulnerable ·Roderich Schupp

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-5060
  2. 2026-10-03 Alias added: GHSA-hmhv-64cw-2g3m

References

Patch 1

Other 2

  • TI-2011-03632 The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates… CVSS 2.0LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences