Unscored CVE-1999-1386 EUVD-1999-1367GHSA-rwp9-w3rx-vf92

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via…

Published Mar 9, 2002 · Updated Aug 1, 2024 · Assigned by mitre

Description

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

References

http://www.redhat.com/support/errata/rh50-errata-general.html#perl
19980308 another /tmp race: `perl -e' opens temp file not safely mailing-list
perl-e-tmp-symlink(7243) vdb-entry