info
discussion
exploit
solution
references
Perl 'rmtree()' Function Local Insecure Permissions Vulnerability
References:
#36982: rmtree() makes symlink targets world-writable
(CPAN)
Debian Bug report logs - #487319 perl-modules: File::Path::rmtree sets symlink t
(Debian)
Larry Wall's Very Own Perl Page
(Larry Wall)
Privacy Statement
Copyright 2010, SecurityFocus