Perl 'rmdir()' Local Race Condition Privilege Escalation Vulnerability

Threat level definition

Perl 'rmdir()' Local Race Condition Privilege Escalation Vulnerability

References:

ASA-2005-196 - HP-UX Perl Local Unauthorized Elevated Privileges (Avaya)
Debian Bug report logs - #286905 perl-modules: File::Path::rmtree makes setuid (Paul Szabo )
Debian Bug report logs - #286922 perl-modules: File::Path::rmtree removes arbitr (Paul Szabo)
File::Path regression in 5.8.9 (Gisle Aas)
Larry Wall's Very Own Perl Page (Larry Wall)
RHSA-2005:674-10 - perl security update (RedHat)

Privacy Statement
Copyright 2008, SecurityFocus