CVE-2008-2827: Medium severity perl 5.30.0 vulnerability

Published Jun 23, 2008

Updated

The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452.

Affected Software

1 affected component

Perl Perl=5.10

Event History

Jun 23, 2008

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2827?

CVE-2008-2827 has a medium severity rating due to its potential for local privilege escalation via symlink attacks.

How do I fix CVE-2008-2827?

To fix CVE-2008-2827, upgrade to a version of Perl higher than 5.10 that addresses the permissions check issue.

Who is affected by CVE-2008-2827?

Users running Perl version 5.10 are affected by CVE-2008-2827, particularly in environments where file permissions are managed.

What is a symlink attack in relation to CVE-2008-2827?

A symlink attack in CVE-2008-2827 allows local users to exploit improper permission checks to change permissions on arbitrary files.

Is CVE-2008-2827 related to other vulnerabilities?

Yes, CVE-2008-2827 is a different vulnerability than CVE-2005-0448 and CVE-2004-0452, although they all involve permission issues.