CVE-2005-0448

published 2005-05-02

CVE-2005-0448: Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a…

Priority P4 11 low 1.2 CVSS 2.0

AV L AC H Au N C N I P A N

Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.

Affected

21 ranges

Vendor	Product	Version range	Fixed in
debian	perl	< perl 5.10.0-18 (bookworm)	perl 5.10.0-18 (bookworm)
debian	perl	< perl 5.8.4-7 (bookworm)	perl 5.8.4-7 (bookworm)
debian	perl	< perl 5.10.0-11 (bookworm)	perl 5.10.0-11 (bookworm)
larry_wall	perl	—	—
larry_wall	perl	—	—
larry_wall	perl	—	—
larry_wall	perl	—	—
perl	file	—	—
perl	perl	—	—
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.10.0-11	5.10.0-11
perl	perl	>= 0 < 5.10.0-18	5.10.0-18
perl	perl	>= 0 < 5.8.4-7	5.8.4-7
perl	perl	>= 0 < 5.10.0-11	5.10.0-11

CVSS provenance

nvd v2.0 1.2 LOW AV:L/AC:H/Au:N/C:N/I:P/A:N

osv 2.6 LOW

vendor_debian 2.6 LOW

vendor_redhat 2.6 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-362