Nessus Plugin #16429

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[GLSA-200501-38] Perl: rmtree and DBI tmpfile vulnerabilities

Family:

Gentoo Local Security Checks

Category:

infos

Copyright:

(C) 2005 Michel Arboi

Summary:

Perl: rmtree and DBI tmpfile vulnerabilities

Version:

$Revision: 1.1 $

Cve_id:

-

Bugtraq_id:

-

Xrefs:

GLSA:200501-38

Description:

The remote host is affected by the vulnerability described in GLSA-200501-38
(Perl: rmtree and DBI tmpfile vulnerabilities)


Javier Fernandez-Sanguino Pena discovered that the DBI library creates
temporary files in an insecure, predictable way (CAN-2005-0077). Paul
Szabo found out that "File::Path::rmtree" also handles temporary files
insecurely (CAN-2004-0452).

Impact

A local attacker could create symbolic links in the temporary files
directory that point to a valid file somewhere on the filesystem. When
the DBI library or File::Path::rmtree is executed, this could be used
to overwrite files with the rights of the user calling these functions.

Workaround

There are no known workarounds at this time.

References:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0077
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0452


Solution:
All Perl users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose dev-lang/perl
All DBI library users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose dev-perl/DBI


Risk factor : Medium