CVE-2008-5303: Race Condition
Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5303?
CVE-2008-5303 is considered to have a medium severity due to its potential for local users to exploit the race condition.
How do I fix CVE-2008-5303?
To fix CVE-2008-5303, upgrade to a patched version of Perl that addresses this vulnerability.
Who is affected by CVE-2008-5303?
CVE-2008-5303 affects users of Perl 5.8.8 with File::Path version 1.08 due to improper handling of symlinks.
What is a symlink attack in relation to CVE-2008-5303?
A symlink attack in the context of CVE-2008-5303 occurs when a local user can exploit the race condition to delete arbitrary files through symbolic links.
Are there any workarounds for CVE-2008-5303?
Possible workarounds for CVE-2008-5303 include restricting user permissions on the filesystem to limit the ability to create symlinks.