Perl RMTree本地竞态条件漏洞

漏洞信息详情

Perl RMTree本地竞态条件漏洞

• CNNVD编号：CNNVD-200412-080
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2004-0452
  
• 漏洞类型：
  
  
  竞争条件
  
• 发布时间：
  
  2004-12-21
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  larry_wall
• 漏洞来源：
  The researcher tha…

Perl 5.6.1和5.8.4版本的文件：：路径模块中的rmtree函数的竞态条件存在漏洞。本地用户借助符号连接攻击删除任意文件和目录且可能读取文件和目录。

The vendor has released Perl version 5.8.4-5 to address this vulnerability. Please contact the vendor for details.
Please see the referenced advisories for more information.

Larry Wall Perl 5.6.1

• Citrix MPSF300R05W2K026.msiFrench
  
  http://support.citrix.com/servlet/KbServlet/download/13453-102-16744/M
  PSF300R05W2K026.msi
• Citrix MPSG300R05W2K026.msiGerman
  
  http://support.citrix.com/servlet/KbServlet/download/13451-102-16742/M
  PSG300R05W2K026.msi
• Citrix MPSG300R05W2K3038.msiGerman
  
  http://support.citrix.com/servlet/KbServlet/download/13446-102-16737/M
  PSG300R05W2K3038.msi
• Citrix MPSJ300R05W2K026.msiJapanese
  
  http://support.citrix.com/servlet/KbServlet/download/13452-102-16743/M
  PSJ300R05W2K026.msi
• Citrix MPSJ300R05W2K3038.msiJapanese
  
  http://support.citrix.com/servlet/KbServlet/download/13447-102-16738/M
  PSJ300R05W2K3038.msi
• Citrix MPSS300R05W2K026.msiSpanish
  
  http://support.citrix.com/servlet/KbServlet/download/13454-102-16745/M
  PSS300R05W2K026.msi
• Debian libperl-dev_5.6.1-8.8_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_alpha.deb
• Debian libperl-dev_5.6.1-8.8_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_arm.deb
• Debian libperl-dev_5.6.1-8.8_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_hppa.deb
• Debian libperl-dev_5.6.1-8.8_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_i386.deb
• Debian libperl-dev_5.6.1-8.8_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_ia64.deb
• Debian libperl-dev_5.6.1-8.8_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_m68k.deb
• Debian libperl-dev_5.6.1-8.8_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_mips.deb
• Debian libperl-dev_5.6.1-8.8_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_mipsel.deb
• Debian libperl-dev_5.6.1-8.8_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_powerpc.deb
• Debian libperl-dev_5.6.1-8.8_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl-dev_5.6.1-
  8.8_s390.deb
• Debian libperl5.6_5.6.1-8.8_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_alpha.deb
• Debian libperl5.6_5.6.1-8.8_arm.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_arm.deb
• Debian libperl5.6_5.6.1-8.8_hppa.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_hppa.deb
• Debian libperl5.6_5.6.1-8.8_i386.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_i386.deb
• Debian libperl5.6_5.6.1-8.8_ia64.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_ia64.deb
• Debian libperl5.6_5.6.1-8.8_m68k.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_m68k.deb
• Debian libperl5.6_5.6.1-8.8_mips.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_mips.deb
• Debian libperl5.6_5.6.1-8.8_mipsel.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_mipsel.deb
• Debian libperl5.6_5.6.1-8.8_powerpc.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_powerpc.deb
• Debian libperl5.6_5.6.1-8.8_s390.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/libperl5.6_5.6.1-8
  .8_s390.deb
• Debian perl-base_5.6.1-8.8_alpha.debDebian GNU/Linux 3.0 alias woody
  
  http://security.debian.org/pool/updates/main/p/perl/perl-base_5.6.1-8.
  8_alpha.deb
• Debian perl-base_5.6.1-8.8_arm.debDebian GNU/Linux 3.0 alias woody