PT-2011-1254 · Perl+1 · File::Temp+1

John Lightsey · Publicado 2011-06-27 · Atualizado 2025-08-14 · CVE-2011-4116

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions File::Temp module for Perl (affected versions not specified)

Description The issue is related to the is safe function in the File::Temp module for Perl, which does not properly handle symlinks. This can potentially allow a remote attacker to impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

BDU:2023-01642

CVE-2011-4116

ECHO-D134-92E0-C60B

Produtos afetados

Debian

File::Temp

Referências · 17

• 🔥 https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14 · Exploit
• https://github.com/endpointlabs/VulnerableDotNetCore3Project/issues/94 · Nota
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2011-4116 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-01642 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/11/04/2 · Nota
• https://t.me/cveNotify/130830 · Publicação no Telegram
• https://seclists.org/oss-sec/2011/q4/238 · Nota
• https://t.me/cibsecurity/9544 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2011-4116 · Nota de Segurança
• http://thread.gmane.org/gmane.comp.security.oss.general/6174/focus=6177 · Nota
• https://t.me/cvenotify/714 · Publicação no Telegram
• https://rt.cpan.org/Public/Bug/Display.html?id=69106 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-4116 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4116 · Aviso do Fabricante
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD · Aviso do Fabricante