CVE-1999-1386 - Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file

Back Back to CVE browser

MEDIUM

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file

Published Mar 9, 2002

5.5

MEDIUM

CVSS 3.1

EPSS 0.46%

Description

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (3)

http://marc.info/?l=bugtraq&m=88932165406213&w=2
mailing-listx_refsource_BUGTRAQExploitMailing List
http://www.iss.net/security_center/static/7243.php
vdb-entryx_refsource_XFBroken Link
http://www.redhat.com/support/errata/rh50-errata-general.html#perl
x_refsource_CONFIRMBroken Link

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=88932165406213&w=2		mailing-listx_refsource_BUGTRAQExploitMailing List
http://www.iss.net/security_center/static/7243.php		vdb-entryx_refsource_XFBroken Link
http://www.redhat.com/support/errata/rh50-errata-general.html#perl		x_refsource_CONFIRMBroken Link

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1386

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1386

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1386