CVE-2004-0452

published 2004-12-21

CVE-2004-0452: Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to…

Priority P4 10 low 2.6 CVSS 2.0

AV L AC H Au N C N I P A P

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.

Affected

27 ranges · showing 25

Vendor	Product	Version range	Fixed in
debian	perl	< perl 5.10.0-18 (bookworm)	perl 5.10.0-18 (bookworm)
debian	perl	< perl 5.8.4-7 (bookworm)	perl 5.8.4-7 (bookworm)
debian	perl	< perl 5.10.0-11 (bookworm)	perl 5.10.0-11 (bookworm)
debian	perl	< perl 5.8.4-5 (bookworm)	perl 5.8.4-5 (bookworm)
larry_wall	perl	—	—
larry_wall	perl	—	—
larry_wall	perl	—	—
larry_wall	perl	—	—
larry_wall	perl	—	—
perl	file	—	—
perl	perl	—	—
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.8.4-5	5.8.4-5
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.8.4-5	5.8.4-5
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.8.4-5	5.8.4-5
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7

CVSS provenance

nvd v2.0 2.6 LOW AV:L/AC:H/Au:N/C:N/I:P/A:P

osv 2.6 LOW

vendor_debian 2.6 LOW

vendor_redhat 2.6 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-362