CVE-2008-5302

Source
https://nvd.nist.gov/vuln/detail/CVE-2008-5302
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2008-5302.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2008-5302
Downstream
Published
2008-12-01T17:30:01Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

References

Affected packages