PT-2011-1254 · Perl+1 · File::Temp+1

John Lightsey · Published 2011-06-27 · Updated 2025-08-14 · CVE-2011-4116

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions File::Temp module for Perl (affected versions not specified)

Description The issue is related to the is safe function in the File::Temp module for Perl, which does not properly handle symlinks. This can potentially allow a remote attacker to impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2023-01642

CVE-2011-4116

ECHO-D134-92E0-C60B

Affected Products

Debian

File::Temp

References · 17

• 🔥 https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14 · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2011-4116 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01642 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-4116 · Security Note
• https://rt.cpan.org/Public/Bug/Display.html?id=69106 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-4116 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-4116 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-4116 · Vendor Advisory
• https://github.com/endpointlabs/VulnerableDotNetCore3Project/issues/94 · Note
• http://openwall.com/lists/oss-security/2011/11/04/2 · Note
• https://t.me/cveNotify/130830 · Telegram Post
• https://seclists.org/oss-sec/2011/q4/238 · Note
• https://t.me/cibsecurity/9544 · Telegram Post
• http://thread.gmane.org/gmane.comp.security.oss.general/6174/focus=6177 · Note