CVEvulnerability
CVE-2011-5060
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.
Affected configurations
• roderich schupp par-packer module (<= 1.002)
• roderich schupp par-packer module 0.63
• roderich schupp par-packer module 0.64
• roderich schupp par-packer module 0.65
• roderich schupp par-packer module 0.66
• roderich schupp par-packer module 0.67
• roderich schupp par-packer module 0.68
• roderich schupp par-packer module 0.69
• roderich schupp par-packer module 0.70
• roderich schupp par-packer module 0.71
• roderich schupp par-packer module 0.72
• roderich schupp par-packer module 0.73
• roderich schupp par-packer module 0.74
• roderich schupp par-packer module 0.75
• roderich schupp par-packer module 0.76
• roderich schupp par-packer module 0.77
• roderich schupp par-packer module 0.78
• roderich schupp par-packer module 0.79
• roderich schupp par-packer module 0.80
• roderich schupp par-packer module 0.81
• roderich schupp par-packer module 0.82
• roderich schupp par-packer module 0.83
• roderich schupp par-packer module 0.85
• roderich schupp par-packer module 0.86
• roderich schupp par-packer module 0.87
• roderich schupp par-packer module 0.88
• roderich schupp par-packer module 0.89
• roderich schupp par-packer module 0.90
• roderich schupp par-packer module 0.91
• roderich schupp par-packer module 0.92
• roderich schupp par-packer module 0.93
• roderich schupp par-packer module 0.94
• roderich schupp par-packer module 0.941
• roderich schupp par-packer module 0.942
• roderich schupp par-packer module 0.951
• roderich schupp par-packer module 0.952
• roderich schupp par-packer module 0.953
• roderich schupp par-packer module 0.954
• roderich schupp par-packer module 0.955
• roderich schupp par-packer module 0.956
• roderich schupp par-packer module 0.957
• roderich schupp par-packer module 0.958
• roderich schupp par-packer module 0.959
• roderich schupp par-packer module 0.960
• roderich schupp par-packer module 0.970
• roderich schupp par-packer module 0.973
• roderich schupp par-packer module 0.975
• roderich schupp par-packer module 0.976
• roderich schupp par-packer module 0.977
• roderich schupp par-packer module 0.978
• roderich schupp par-packer module 0.979
• roderich schupp par-packer module 0.980
• roderich schupp par-packer module 0.981
• roderich schupp par-packer module 0.982
• roderich schupp par-packer module 0.991
• roderich schupp par-packer module 0.992 01
• roderich schupp par-packer module 0.992 02
• roderich schupp par-packer module 0.992 03
• roderich schupp par-packer module 0.992 04
• roderich schupp par-packer module 0.992 05
… and 3 more
Related
Weakness · not in database (1)
References
- http://cpansearch.perl.org/src/RSCHUPP/PAR-1.003/ChangeLog cpansearch.perl.org
- https://bugzilla.redhat.com/show_bug.cgi?id=753955 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72435 exchange.xforce.ibmcloud.com
- https://rt.cpan.org/Public/Bug/Display.html?id=69560 rt.cpan.org
- http://cpansearch.perl.org/src/RSCHUPP/PAR-1.003/ChangeLog cpansearch.perl.org
- https://bugzilla.redhat.com/show_bug.cgi?id=753955 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72435 exchange.xforce.ibmcloud.com
- https://rt.cpan.org/Public/Bug/Display.html?id=69560 rt.cpan.org