PT-2008-1027 · Debian+1 · Libcgi-Fast-Perl+1

Paul Szabo · Published 2008-12-01 · Updated 2018-10-11 · CVE-2008-5302

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions libcgi-fast-perl (affected versions not specified)

Description The issue concerns multiple vulnerabilities in the libcgi-fast-perl package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited by a local attacker, potentially leading to breaches of confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2015-02556

CVE-2008-5302

DSA-1678-1

RHSA-2010:0458

RHSA-2010_0458

Affected Products

Red Hat

Libcgi-Fast-Perl

References · 35

• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36 · Exploit
• 🔥 http://gossamer-threads.com/lists/perl/porters/233695#233695 · Exploit
• 🔥 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905 · Exploit
• http://ubuntu.com/usn/usn-700-2 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-5302 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5302 · Security Note
• http://ubuntu.com/usn/usn-700-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-5302 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:116 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02556 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2008-5302 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0458.html · Vendor Advisory
• http://debian.org/security/2008/dsa-1678 · Vendor Advisory