OSVDB ID: 11201 Title: Perl on Trustix Secure Linux Multiple Script Insecure Temporary File Creation |
Info |
|
|
Dates |
||||
|
|
Description |
Multiple scripts within Perl contain a flaw that may allow a malicious user to overwrite arbitrary files with the permissions of the user running the script. The is due to the scripts' creation of world-writeable symbolic links, which an attacker can make point to any file in the filesystem. When the script uses the symlink to write data later, the newly specified file is overwritten, causing a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Race Condition Impact: Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version 5.8.5 or higher, as it has been reported to fix the majority of these vulnerabilities. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|