DEBIAN-CVE-2008-5302

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2008-5302
Downstream
DSA-1678-1
Published: 01 Dec 2008, 17:30
Last modified:28 Apr 2026, 20:10

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

01 Dec 2008, 17:30
Published
Vulnerability first disclosed
28 Apr 2026, 20:10
Last Modified
Vulnerability information updated

Description

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

Affected Systems

  • debian•perl

    < 5.10.0-18 | < 5.10.0-18 | < 5.10.0-18 | < 5.10.0-18

References (1)