Summary
[0.33-5.0.1]
- Use 3 arg open in grep() [Orabug: 38120380][CVE-2011-10007]
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | perl-File-Find-Rule | 0:0.33-5.0.1.el7 |
Vulnerabilities 1
-
High 8.8
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter t…