CVE-2008-5302: Race Condition
Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5302?
CVE-2008-5302 is classified as a high severity vulnerability due to the potential for local users to exploit it to create arbitrary setuid binaries.
How do I fix CVE-2008-5302?
To fix CVE-2008-5302, update Perl's File::Path module to versions that are not affected, specifically versions after 2.07.
Who is affected by CVE-2008-5302?
CVE-2008-5302 affects systems running Perl 5.8.8 and Perl 5.10.0 with vulnerable versions of the File::Path module.
What type of attack does CVE-2008-5302 involve?
CVE-2008-5302 involves a symlink attack that exploits a race condition in the rmtree function.
Is CVE-2008-5302 a new vulnerability?
No, CVE-2008-5302 represents a regression error and is related to past vulnerabilities such as CVE-2005-0448 and CVE-2004-0452.