CVE-2005-0448: Race Condition
Published Mar 12, 2005
·Updated
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
Affected Software
4 affected components
Larry Wall Perl=5.8.0
Larry Wall Perl=5.8.4
Larry Wall Perl=5.8.1
Larry Wall Perl=5.8.3
Remediation
Patch Available
Patch Available
Event History
Mar 12, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0448?
CVE-2005-0448 is considered to have medium severity due to its potential for local users to exploit the race condition to create setuid binaries.
2
How do I fix CVE-2005-0448?
To fix CVE-2005-0448, it is recommended to upgrade to Perl version 5.8.5 or later.
3
Which versions of Perl are affected by CVE-2005-0448?
CVE-2005-0448 affects Perl versions 5.8.0, 5.8.1, 5.8.3, and 5.8.4.
4
What type of vulnerability is CVE-2005-0448?
CVE-2005-0448 is a race condition vulnerability affecting the rmtree function in Perl's File::Path.pm.
5
Can CVE-2005-0448 be exploited remotely?
CVE-2005-0448 cannot be exploited remotely as it requires local user access to exploit the race condition.