CVE-2004-0976: Low severity larry wall perl vulnerability
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0976?
CVE-2004-0976 is considered a moderate severity vulnerability that allows local file overwriting via symlink attacks.
How do I fix CVE-2004-0976?
To fix CVE-2004-0976, ensure that scripts do not use predictable temporary file names or implement secure methods of creating temporary files.
Which versions of Perl are affected by CVE-2004-0976?
CVE-2004-0976 affects Perl versions 5.6, 5.6.1, 5.8.0, 5.8.1, and 5.8.3.
What is a symlink attack in the context of CVE-2004-0976?
A symlink attack in CVE-2004-0976 occurs when an attacker creates a symbolic link that tricks the system into overwriting a file with a temporary file.
Can CVE-2004-0976 be exploited remotely?
CVE-2004-0976 requires local access to exploit the vulnerability, making it less likely to be exploited remotely.