Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2005-0448
Vulnerability from cvelistv5
Published
2005-03-12 05:00
Modified
2024-08-07 21:13
Severity ?
EPSS score ?
Summary
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T21:13:54.238Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "DSA-696", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2005/dsa-696" }, { "name": "HPSBUX01208", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://www.securityfocus.com/advisories/8704" }, { "name": "RHSA-2005:881", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "name": "MDKSA-2005:079", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "name": "55314", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/55314" }, { "name": "18075", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/18075" }, { "name": "12767", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/12767" }, { "name": "CLSA-2006:1056", "tags": [ "vendor-advisory", "x_refsource_CONECTIVA", "x_transferred" ], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "name": "oval:org.mitre.oval:def:10475", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "name": "20060101-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI", "x_transferred" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U" }, { "name": "FLSA-2006:152845", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "name": "oval:org.mitre.oval:def:728", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "name": "GLSA-200501-38", "tags": [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred" ], "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "name": "18517", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/18517" }, { "name": "RHSA-2005:674", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "name": "17079", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/17079" }, { "name": "14531", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/14531" }, { "name": "USN-94-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/94-1/" }, { "name": "SSRT5938", "tags": [ "vendor-advisory", "x_refsource_HP", "x_transferred" ], "url": "http://www.securityfocus.com/advisories/8704" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2005-03-09T00:00:00", "descriptions": [ { "lang": "en", "value": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-03T20:57:01", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian" }, "references": [ { "name": "DSA-696", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2005/dsa-696" }, { "name": "HPSBUX01208", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://www.securityfocus.com/advisories/8704" }, { "name": "RHSA-2005:881", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "name": "MDKSA-2005:079", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "name": "55314", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/55314" }, { "name": "18075", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/18075" }, { "name": "12767", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/12767" }, { "name": "CLSA-2006:1056", "tags": [ "vendor-advisory", "x_refsource_CONECTIVA" ], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "name": "oval:org.mitre.oval:def:10475", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "name": "20060101-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U" }, { "name": "FLSA-2006:152845", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "name": "oval:org.mitre.oval:def:728", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "name": "GLSA-200501-38", "tags": [ "vendor-advisory", "x_refsource_GENTOO" ], "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "name": "18517", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/18517" }, { "name": "RHSA-2005:674", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "name": "17079", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/17079" }, { "name": "14531", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/14531" }, { "name": "USN-94-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/94-1/" }, { "name": "SSRT5938", "tags": [ "vendor-advisory", "x_refsource_HP" ], "url": "http://www.securityfocus.com/advisories/8704" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "security@debian.org", "ID": "CVE-2005-0448", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "DSA-696", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-696" }, { "name": "HPSBUX01208", "refsource": "HP", "url": "http://www.securityfocus.com/advisories/8704" }, { "name": "RHSA-2005:881", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "name": "MDKSA-2005:079", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "name": "55314", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55314" }, { "name": "18075", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18075" }, { "name": "12767", "refsource": "BID", "url": "http://www.securityfocus.com/bid/12767" }, { "name": "CLSA-2006:1056", "refsource": "CONECTIVA", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "name": "oval:org.mitre.oval:def:10475", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "name": "20060101-01-U", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U" }, { "name": "FLSA-2006:152845", "refsource": "FEDORA", "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "name": "oval:org.mitre.oval:def:728", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "name": "GLSA-200501-38", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "name": "18517", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18517" }, { "name": "RHSA-2005:674", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "name": "17079", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17079" }, { "name": "14531", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/14531" }, { "name": "USN-94-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/94-1/" }, { "name": "SSRT5938", "refsource": "HP", "url": "http://www.securityfocus.com/advisories/8704" } ] } } } }, "cveMetadata": { "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2005-0448", "datePublished": "2005-03-12T05:00:00", "dateReserved": "2005-02-16T00:00:00", "dateUpdated": "2024-08-07T21:13:54.238Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2005-0448\",\"sourceIdentifier\":\"security@debian.org\",\"published\":\"2005-05-02T04:00:00.000\",\"lastModified\":\"2024-11-20T23:55:08.947\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:H/Au:N/C:N/I:P/A:N\",\"baseScore\":1.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"HIGH\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":1.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D30E072-9E6A-49B4-A5C7-63A328598A68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"434F0580-985F-42AF-BA10-FAB7E2C23ED0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18B179E0-C843-46C9-AAD2-78E998175E41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD5E5A51-ED4C-4927-8C4D-502E79391E19\"}]}]}],\"references\":[{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U\",\"source\":\"security@debian.org\"},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056\",\"source\":\"security@debian.org\"},{\"url\":\"http://fedoranews.org/updates/FEDORA--.shtml\",\"source\":\"security@debian.org\"},{\"url\":\"http://secunia.com/advisories/14531\",\"source\":\"security@debian.org\"},{\"url\":\"http://secunia.com/advisories/17079\",\"source\":\"security@debian.org\"},{\"url\":\"http://secunia.com/advisories/18075\",\"source\":\"security@debian.org\"},{\"url\":\"http://secunia.com/advisories/18517\",\"source\":\"security@debian.org\"},{\"url\":\"http://secunia.com/advisories/55314\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.debian.org/security/2005/dsa-696\",\"source\":\"security@debian.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml\",\"source\":\"security@debian.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2005:079\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2005-674.html\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2005-881.html\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.securityfocus.com/advisories/8704\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.securityfocus.com/advisories/8704\",\"source\":\"security@debian.org\"},{\"url\":\"http://www.securityfocus.com/bid/12767\",\"source\":\"security@debian.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475\",\"source\":\"security@debian.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728\",\"source\":\"security@debian.org\"},{\"url\":\"https://usn.ubuntu.com/94-1/\",\"source\":\"security@debian.org\"},{\"url\":\"ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://fedoranews.org/updates/FEDORA--.shtml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/14531\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/17079\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/18075\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/18517\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/55314\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2005/dsa-696\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDKSA-2005:079\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2005-674.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2005-881.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/advisories/8704\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/advisories/8704\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/12767\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/94-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
rhsa-2005_674
Vulnerability from csaf_redhat
Published
2005-10-05 11:48
Modified
2024-11-22 00:05
Summary
Red Hat Security Advisory: perl security update
Notes
Topic
Updated Perl packages that fix security issues and contain several bug
fixes are now available for Red Hat Enterprise Linux 4.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
Details
Perl is a high-level programming language commonly used for system
administration utilities and Web programming.
Paul Szabo discovered a bug in the way Perl's File::Path::rmtree module
removed directory trees. If a local user has write permissions to a
subdirectory within the tree being removed by File::Path::rmtree, it is
possible for them to create setuid binary files. The Common Vulnerabilities
and Exposures project (cve.mitre.org) has assigned the name CAN-2005-0448
to this issue.
This update also addresses the following issues:
-- Perl interpreter caused a segmentation fault when environment
changes occurred during runtime.
-- Code in lib/FindBin contained a regression that caused problems with
MRTG software package.
-- Perl incorrectly declared it provides an FCGI interface where it in fact
did not.
Users of Perl are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Perl packages that fix security issues and contain several bug\nfixes are now available for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.", "title": "Topic" }, { "category": "general", "text": "Perl is a high-level programming language commonly used for system \nadministration utilities and Web programming. \n\nPaul Szabo discovered a bug in the way Perl\u0027s File::Path::rmtree module\nremoved directory trees. If a local user has write permissions to a\nsubdirectory within the tree being removed by File::Path::rmtree, it is\npossible for them to create setuid binary files. The Common Vulnerabilities\nand Exposures project (cve.mitre.org) has assigned the name CAN-2005-0448\nto this issue. \n\nThis update also addresses the following issues:\n\n-- Perl interpreter caused a segmentation fault when environment \nchanges occurred during runtime.\n\n-- Code in lib/FindBin contained a regression that caused problems with \n MRTG software package.\n\n-- Perl incorrectly declared it provides an FCGI interface where it in fact\n did not. \n\nUsers of Perl are advised to upgrade to these updated packages, which \ncontain backported patches to correct these issues.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2005:674", "url": "https://access.redhat.com/errata/RHSA-2005:674" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "127023", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=127023" }, { "category": "external", "summary": "148848", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=148848" }, { "category": "external", "summary": "155888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=155888" }, { "category": "external", "summary": "157694", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=157694" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_674.json" } ], "title": "Red Hat Security Advisory: perl security update", "tracking": { "current_release_date": "2024-11-22T00:05:35+00:00", "generator": { "date": "2024-11-22T00:05:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2005:674", "initial_release_date": "2005-10-05T11:48:00+00:00", "revision_history": [ { "date": "2005-10-05T11:48:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2005-10-05T00:00:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T00:05:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 4", "product": { "name": "Red Hat Enterprise Linux AS version 4", "product_id": "4AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::as" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Desktop version 4", "product": { "name": "Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 4", "product": { "name": "Red Hat Enterprise Linux ES version 4", "product_id": "4ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 4", "product": { "name": "Red Hat Enterprise Linux WS version 4", "product_id": "4WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:4::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.ia64", "product": { "name": "perl-3:5.8.5-16.RHEL4.ia64", "product_id": "perl-3:5.8.5-16.RHEL4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=ia64\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=ia64\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=ia64\u0026epoch=3" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.src", "product": { "name": "perl-3:5.8.5-16.RHEL4.src", "product_id": "perl-3:5.8.5-16.RHEL4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=src\u0026epoch=3" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.x86_64", "product": { "name": "perl-3:5.8.5-16.RHEL4.x86_64", "product_id": "perl-3:5.8.5-16.RHEL4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=x86_64\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=x86_64\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=x86_64\u0026epoch=3" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.i386", "product": { "name": "perl-3:5.8.5-16.RHEL4.i386", "product_id": "perl-3:5.8.5-16.RHEL4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=i386\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=i386\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=i386\u0026epoch=3" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.ppc", "product": { "name": "perl-3:5.8.5-16.RHEL4.ppc", "product_id": "perl-3:5.8.5-16.RHEL4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=ppc\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=ppc\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=ppc\u0026epoch=3" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.s390x", "product": { "name": "perl-3:5.8.5-16.RHEL4.s390x", "product_id": "perl-3:5.8.5-16.RHEL4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=s390x\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=s390x\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=s390x\u0026epoch=3" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "perl-3:5.8.5-16.RHEL4.s390", "product": { "name": "perl-3:5.8.5-16.RHEL4.s390", "product_id": "perl-3:5.8.5-16.RHEL4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.5-16.RHEL4?arch=s390\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "product": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "product_id": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-debuginfo@5.8.5-16.RHEL4?arch=s390\u0026epoch=3" } } }, { "category": "product_version", "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "product": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "product_id": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.5-16.RHEL4?arch=s390\u0026epoch=3" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.src as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.src" }, "product_reference": "perl-3:5.8.5-16.RHEL4.src", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux AS version 4", "product_id": "4AS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.src as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.src" }, "product_reference": "perl-3:5.8.5-16.RHEL4.src", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", "product_id": "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.src as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.src" }, "product_reference": "perl-3:5.8.5-16.RHEL4.src", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux ES version 4", "product_id": "4ES:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.src as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.src" }, "product_reference": "perl-3:5.8.5-16.RHEL4.src", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.i386 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.i386" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.i386", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ia64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ia64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ia64", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.ppc as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ppc" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.ppc", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.s390x as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390x" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.s390x", "relates_to_product_reference": "4WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64 as a component of Red Hat Enterprise Linux WS version 4", "product_id": "4WS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" }, "product_reference": "perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "relates_to_product_reference": "4WS" } ] }, "vulnerabilities": [ { "cve": "CVE-2005-0448", "discovery_date": "2005-03-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1617524" } ], "notes": [ { "category": "description", "text": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", "title": "Vulnerability description" }, { "category": "summary", "text": "security flaw", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "4AS:perl-3:5.8.5-16.RHEL4.i386", "4AS:perl-3:5.8.5-16.RHEL4.ia64", "4AS:perl-3:5.8.5-16.RHEL4.ppc", "4AS:perl-3:5.8.5-16.RHEL4.s390", "4AS:perl-3:5.8.5-16.RHEL4.s390x", "4AS:perl-3:5.8.5-16.RHEL4.src", "4AS:perl-3:5.8.5-16.RHEL4.x86_64", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-3:5.8.5-16.RHEL4.src", "4Desktop:perl-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-3:5.8.5-16.RHEL4.i386", "4ES:perl-3:5.8.5-16.RHEL4.ia64", "4ES:perl-3:5.8.5-16.RHEL4.ppc", "4ES:perl-3:5.8.5-16.RHEL4.s390", "4ES:perl-3:5.8.5-16.RHEL4.s390x", "4ES:perl-3:5.8.5-16.RHEL4.src", "4ES:perl-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-3:5.8.5-16.RHEL4.i386", "4WS:perl-3:5.8.5-16.RHEL4.ia64", "4WS:perl-3:5.8.5-16.RHEL4.ppc", "4WS:perl-3:5.8.5-16.RHEL4.s390", "4WS:perl-3:5.8.5-16.RHEL4.s390x", "4WS:perl-3:5.8.5-16.RHEL4.src", "4WS:perl-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-0448" }, { "category": "external", "summary": "RHBZ#1617524", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617524" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-0448", "url": "https://www.cve.org/CVERecord?id=CVE-2005-0448" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-0448", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-0448" } ], "release_date": "2005-03-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2005-10-05T11:48:00+00:00", "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied. Use Red Hat\nNetwork to download and update your packages. To launch the Red Hat\nUpdate Agent, use the following command:\n\n up2date\n\nFor information on how to install packages manually, refer to the\nfollowing Web page for the System Administration or Customization\nguide specific to your system:\n\n http://www.redhat.com/docs/manuals/enterprise/", "product_ids": [ "4AS:perl-3:5.8.5-16.RHEL4.i386", "4AS:perl-3:5.8.5-16.RHEL4.ia64", "4AS:perl-3:5.8.5-16.RHEL4.ppc", "4AS:perl-3:5.8.5-16.RHEL4.s390", "4AS:perl-3:5.8.5-16.RHEL4.s390x", "4AS:perl-3:5.8.5-16.RHEL4.src", "4AS:perl-3:5.8.5-16.RHEL4.x86_64", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4AS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4AS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-3:5.8.5-16.RHEL4.src", "4Desktop:perl-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4Desktop:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-3:5.8.5-16.RHEL4.i386", "4ES:perl-3:5.8.5-16.RHEL4.ia64", "4ES:perl-3:5.8.5-16.RHEL4.ppc", "4ES:perl-3:5.8.5-16.RHEL4.s390", "4ES:perl-3:5.8.5-16.RHEL4.s390x", "4ES:perl-3:5.8.5-16.RHEL4.src", "4ES:perl-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4ES:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4ES:perl-suidperl-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-3:5.8.5-16.RHEL4.i386", "4WS:perl-3:5.8.5-16.RHEL4.ia64", "4WS:perl-3:5.8.5-16.RHEL4.ppc", "4WS:perl-3:5.8.5-16.RHEL4.s390", "4WS:perl-3:5.8.5-16.RHEL4.s390x", "4WS:perl-3:5.8.5-16.RHEL4.src", "4WS:perl-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.i386", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ia64", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.ppc", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.s390x", "4WS:perl-debuginfo-3:5.8.5-16.RHEL4.x86_64", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.i386", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ia64", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.ppc", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.s390x", "4WS:perl-suidperl-3:5.8.5-16.RHEL4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2005:674" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "security flaw" } ] }
rhsa-2005_881
Vulnerability from csaf_redhat
Published
2005-12-20 15:00
Modified
2024-11-22 00:08
Summary
Red Hat Security Advisory: perl security update
Notes
Topic
Updated Perl packages that fix security issues and bugs are now available
for Red Hat Enterprise Linux 3.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
Details
Perl is a high-level programming language commonly used for system
administration utilities and Web programming.
An integer overflow bug was found in Perl's format string processor. It is
possible for an attacker to cause perl to crash or execute arbitrary code
if the attacker is able to process a malicious format string. This issue
is only exploitable through a script wich passes arbitrary untrusted
strings to the format string processor. The Common Vulnerabilities and
Exposures project assigned the name CVE-2005-3962 to this issue.
Paul Szabo discovered a bug in the way Perl's File::Path::rmtree module
removed directory trees. If a local user has write permissions to a
subdirectory within the tree being removed by File::Path::rmtree, it is
possible for them to create setuid binary files. (CVE-2005-0448)
Solar Designer discovered several temporary file bugs in various Perl
modules. A local attacker could overwrite or create files as the user
running a Perl script that uses a vulnerable module. (CVE-2004-0976)
Users of Perl are advised to upgrade to these updated packages, which
contain backported patches to correct these issues as well as fixes for
several bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Perl packages that fix security issues and bugs are now available\nfor Red Hat Enterprise Linux 3.\n\nThis update has been rated as having moderate security impact by the Red\nHat Security Response Team.", "title": "Topic" }, { "category": "general", "text": "Perl is a high-level programming language commonly used for system\nadministration utilities and Web programming.\n\nAn integer overflow bug was found in Perl\u0027s format string processor. It is\npossible for an attacker to cause perl to crash or execute arbitrary code\nif the attacker is able to process a malicious format string. This issue\nis only exploitable through a script wich passes arbitrary untrusted\nstrings to the format string processor. The Common Vulnerabilities and\nExposures project assigned the name CVE-2005-3962 to this issue.\n\nPaul Szabo discovered a bug in the way Perl\u0027s File::Path::rmtree module\nremoved directory trees. If a local user has write permissions to a\nsubdirectory within the tree being removed by File::Path::rmtree, it is\npossible for them to create setuid binary files. (CVE-2005-0448)\n\nSolar Designer discovered several temporary file bugs in various Perl\nmodules. A local attacker could overwrite or create files as the user\nrunning a Perl script that uses a vulnerable module. (CVE-2004-0976)\n\nUsers of Perl are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues as well as fixes for\nseveral bugs.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2005:881", "url": "https://access.redhat.com/errata/RHSA-2005:881" }, { "category": "external", "summary": "123176", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=123176" }, { "category": "external", "summary": "135975", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=135975" }, { "category": "external", "summary": "136325", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=136325" }, { "category": "external", "summary": "137075", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=137075" }, { "category": "external", "summary": "145215", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=145215" }, { "category": "external", "summary": "147946", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=147946" }, { "category": "external", "summary": "161053", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=161053" }, { "category": "external", "summary": "165078", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=165078" }, { "category": "external", "summary": "166732", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=166732" }, { "category": "external", "summary": "172160", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=172160" }, { "category": "external", "summary": "172256", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=172256" }, { "category": "external", "summary": "172317", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=172317" }, { "category": "external", "summary": "174717", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=174717" }, { "category": "external", "summary": "175135", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=175135" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_881.json" } ], "title": "Red Hat Security Advisory: perl security update", "tracking": { "current_release_date": "2024-11-22T00:08:13+00:00", "generator": { "date": "2024-11-22T00:08:13+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2005:881", "initial_release_date": "2005-12-20T15:00:00+00:00", "revision_history": [ { "date": "2005-12-20T15:00:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2005-12-20T00:00:00+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T00:08:13+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AS version 3", "product": { "name": "Red Hat Enterprise Linux AS version 3", "product_id": "3AS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::as" } } }, { "category": "product_name", "name": "Red Hat Desktop version 3", "product": { "name": "Red Hat Desktop version 3", "product_id": "3Desktop", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::desktop" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ES version 3", "product": { "name": "Red Hat Enterprise Linux ES version 3", "product_id": "3ES", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::es" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux WS version 3", "product": { "name": "Red Hat Enterprise Linux WS version 3", "product_id": "3WS", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:3::ws" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.ia64", "product": { "name": "perl-CPAN-2:1.61-90.4.ia64", "product_id": "perl-CPAN-2:1.61-90.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=ia64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.ia64", "product": { "name": "perl-2:5.8.0-90.4.ia64", "product_id": "perl-2:5.8.0-90.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=ia64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.ia64", "product": { "name": "perl-CGI-2:2.89-90.4.ia64", "product_id": "perl-CGI-2:2.89-90.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=ia64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.ia64", "product": { "name": "perl-suidperl-2:5.8.0-90.4.ia64", "product_id": "perl-suidperl-2:5.8.0-90.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=ia64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.ia64", "product": { "name": "perl-DB_File-2:1.806-90.4.ia64", "product_id": "perl-DB_File-2:1.806-90.4.ia64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=ia64\u0026epoch=2" } } } ], "category": "architecture", "name": "ia64" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.x86_64", "product": { "name": "perl-CPAN-2:1.61-90.4.x86_64", "product_id": "perl-CPAN-2:1.61-90.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.x86_64", "product": { "name": "perl-2:5.8.0-90.4.x86_64", "product_id": "perl-2:5.8.0-90.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.x86_64", "product": { "name": "perl-CGI-2:2.89-90.4.x86_64", "product_id": "perl-CGI-2:2.89-90.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.x86_64", "product": { "name": "perl-suidperl-2:5.8.0-90.4.x86_64", "product_id": "perl-suidperl-2:5.8.0-90.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=x86_64\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.x86_64", "product": { "name": "perl-DB_File-2:1.806-90.4.x86_64", "product_id": "perl-DB_File-2:1.806-90.4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=x86_64\u0026epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.i386", "product": { "name": "perl-CPAN-2:1.61-90.4.i386", "product_id": "perl-CPAN-2:1.61-90.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=i386\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.i386", "product": { "name": "perl-2:5.8.0-90.4.i386", "product_id": "perl-2:5.8.0-90.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=i386\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.i386", "product": { "name": "perl-CGI-2:2.89-90.4.i386", "product_id": "perl-CGI-2:2.89-90.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=i386\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.i386", "product": { "name": "perl-suidperl-2:5.8.0-90.4.i386", "product_id": "perl-suidperl-2:5.8.0-90.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=i386\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.i386", "product": { "name": "perl-DB_File-2:1.806-90.4.i386", "product_id": "perl-DB_File-2:1.806-90.4.i386", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=i386\u0026epoch=2" } } } ], "category": "architecture", "name": "i386" }, { "branches": [ { "category": "product_version", "name": "perl-2:5.8.0-90.4.src", "product": { "name": "perl-2:5.8.0-90.4.src", "product_id": "perl-2:5.8.0-90.4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=src\u0026epoch=2" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.ppc", "product": { "name": "perl-CPAN-2:1.61-90.4.ppc", "product_id": "perl-CPAN-2:1.61-90.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=ppc\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.ppc", "product": { "name": "perl-2:5.8.0-90.4.ppc", "product_id": "perl-2:5.8.0-90.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=ppc\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.ppc", "product": { "name": "perl-CGI-2:2.89-90.4.ppc", "product_id": "perl-CGI-2:2.89-90.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=ppc\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.ppc", "product": { "name": "perl-suidperl-2:5.8.0-90.4.ppc", "product_id": "perl-suidperl-2:5.8.0-90.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=ppc\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.ppc", "product": { "name": "perl-DB_File-2:1.806-90.4.ppc", "product_id": "perl-DB_File-2:1.806-90.4.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=ppc\u0026epoch=2" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.s390x", "product": { "name": "perl-CPAN-2:1.61-90.4.s390x", "product_id": "perl-CPAN-2:1.61-90.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.s390x", "product": { "name": "perl-2:5.8.0-90.4.s390x", "product_id": "perl-2:5.8.0-90.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.s390x", "product": { "name": "perl-CGI-2:2.89-90.4.s390x", "product_id": "perl-CGI-2:2.89-90.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.s390x", "product": { "name": "perl-suidperl-2:5.8.0-90.4.s390x", "product_id": "perl-suidperl-2:5.8.0-90.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=s390x\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.s390x", "product": { "name": "perl-DB_File-2:1.806-90.4.s390x", "product_id": "perl-DB_File-2:1.806-90.4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=s390x\u0026epoch=2" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "perl-CPAN-2:1.61-90.4.s390", "product": { "name": "perl-CPAN-2:1.61-90.4.s390", "product_id": "perl-CPAN-2:1.61-90.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CPAN@1.61-90.4?arch=s390\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-2:5.8.0-90.4.s390", "product": { "name": "perl-2:5.8.0-90.4.s390", "product_id": "perl-2:5.8.0-90.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl@5.8.0-90.4?arch=s390\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-CGI-2:2.89-90.4.s390", "product": { "name": "perl-CGI-2:2.89-90.4.s390", "product_id": "perl-CGI-2:2.89-90.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-CGI@2.89-90.4?arch=s390\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-suidperl-2:5.8.0-90.4.s390", "product": { "name": "perl-suidperl-2:5.8.0-90.4.s390", "product_id": "perl-suidperl-2:5.8.0-90.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-suidperl@5.8.0-90.4?arch=s390\u0026epoch=2" } } }, { "category": "product_version", "name": "perl-DB_File-2:1.806-90.4.s390", "product": { "name": "perl-DB_File-2:1.806-90.4.s390", "product_id": "perl-DB_File-2:1.806-90.4.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-DB_File@1.806-90.4?arch=s390\u0026epoch=2" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.i386" }, "product_reference": "perl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.s390" }, "product_reference": "perl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.src as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.src" }, "product_reference": "perl-2:5.8.0-90.4.src", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.i386" }, "product_reference": "perl-CGI-2:2.89-90.4.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.ia64" }, "product_reference": "perl-CGI-2:2.89-90.4.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.ppc" }, "product_reference": "perl-CGI-2:2.89-90.4.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.s390" }, "product_reference": "perl-CGI-2:2.89-90.4.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.s390x" }, "product_reference": "perl-CGI-2:2.89-90.4.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CGI-2:2.89-90.4.x86_64" }, "product_reference": "perl-CGI-2:2.89-90.4.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.i386" }, "product_reference": "perl-CPAN-2:1.61-90.4.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.ia64" }, "product_reference": "perl-CPAN-2:1.61-90.4.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.ppc" }, "product_reference": "perl-CPAN-2:1.61-90.4.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.s390" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.s390x" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-CPAN-2:1.61-90.4.x86_64" }, "product_reference": "perl-CPAN-2:1.61-90.4.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.i386" }, "product_reference": "perl-DB_File-2:1.806-90.4.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.ia64" }, "product_reference": "perl-DB_File-2:1.806-90.4.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.ppc" }, "product_reference": "perl-DB_File-2:1.806-90.4.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.s390" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.s390x" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-DB_File-2:1.806-90.4.x86_64" }, "product_reference": "perl-DB_File-2:1.806-90.4.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.i386" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.s390" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux AS version 3", "product_id": "3AS:perl-suidperl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3AS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.i386" }, "product_reference": "perl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.s390" }, "product_reference": "perl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.src as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.src" }, "product_reference": "perl-2:5.8.0-90.4.src", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.i386" }, "product_reference": "perl-CGI-2:2.89-90.4.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.ia64" }, "product_reference": "perl-CGI-2:2.89-90.4.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.ppc" }, "product_reference": "perl-CGI-2:2.89-90.4.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.s390" }, "product_reference": "perl-CGI-2:2.89-90.4.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.s390x" }, "product_reference": "perl-CGI-2:2.89-90.4.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CGI-2:2.89-90.4.x86_64" }, "product_reference": "perl-CGI-2:2.89-90.4.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.i386" }, "product_reference": "perl-CPAN-2:1.61-90.4.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.ia64" }, "product_reference": "perl-CPAN-2:1.61-90.4.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.ppc" }, "product_reference": "perl-CPAN-2:1.61-90.4.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.s390" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.s390x" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-CPAN-2:1.61-90.4.x86_64" }, "product_reference": "perl-CPAN-2:1.61-90.4.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.i386" }, "product_reference": "perl-DB_File-2:1.806-90.4.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.ia64" }, "product_reference": "perl-DB_File-2:1.806-90.4.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.ppc" }, "product_reference": "perl-DB_File-2:1.806-90.4.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.s390" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.s390x" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-DB_File-2:1.806-90.4.x86_64" }, "product_reference": "perl-DB_File-2:1.806-90.4.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.i386 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.i386" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ia64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ppc as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.s390" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390x as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.x86_64 as a component of Red Hat Desktop version 3", "product_id": "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3Desktop" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.i386" }, "product_reference": "perl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.s390" }, "product_reference": "perl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.src as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.src" }, "product_reference": "perl-2:5.8.0-90.4.src", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.i386" }, "product_reference": "perl-CGI-2:2.89-90.4.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.ia64" }, "product_reference": "perl-CGI-2:2.89-90.4.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.ppc" }, "product_reference": "perl-CGI-2:2.89-90.4.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.s390" }, "product_reference": "perl-CGI-2:2.89-90.4.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.s390x" }, "product_reference": "perl-CGI-2:2.89-90.4.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CGI-2:2.89-90.4.x86_64" }, "product_reference": "perl-CGI-2:2.89-90.4.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.i386" }, "product_reference": "perl-CPAN-2:1.61-90.4.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.ia64" }, "product_reference": "perl-CPAN-2:1.61-90.4.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.ppc" }, "product_reference": "perl-CPAN-2:1.61-90.4.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.s390" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.s390x" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-CPAN-2:1.61-90.4.x86_64" }, "product_reference": "perl-CPAN-2:1.61-90.4.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.i386" }, "product_reference": "perl-DB_File-2:1.806-90.4.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.ia64" }, "product_reference": "perl-DB_File-2:1.806-90.4.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.ppc" }, "product_reference": "perl-DB_File-2:1.806-90.4.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.s390" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.s390x" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-DB_File-2:1.806-90.4.x86_64" }, "product_reference": "perl-DB_File-2:1.806-90.4.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.i386" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.s390" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux ES version 3", "product_id": "3ES:perl-suidperl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3ES" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.i386" }, "product_reference": "perl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.s390" }, "product_reference": "perl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.src as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.src" }, "product_reference": "perl-2:5.8.0-90.4.src", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.i386" }, "product_reference": "perl-CGI-2:2.89-90.4.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.ia64" }, "product_reference": "perl-CGI-2:2.89-90.4.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.ppc" }, "product_reference": "perl-CGI-2:2.89-90.4.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.s390" }, "product_reference": "perl-CGI-2:2.89-90.4.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.s390x" }, "product_reference": "perl-CGI-2:2.89-90.4.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CGI-2:2.89-90.4.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CGI-2:2.89-90.4.x86_64" }, "product_reference": "perl-CGI-2:2.89-90.4.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.i386" }, "product_reference": "perl-CPAN-2:1.61-90.4.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.ia64" }, "product_reference": "perl-CPAN-2:1.61-90.4.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.ppc" }, "product_reference": "perl-CPAN-2:1.61-90.4.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.s390" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.s390x" }, "product_reference": "perl-CPAN-2:1.61-90.4.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-CPAN-2:1.61-90.4.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-CPAN-2:1.61-90.4.x86_64" }, "product_reference": "perl-CPAN-2:1.61-90.4.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.i386" }, "product_reference": "perl-DB_File-2:1.806-90.4.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.ia64" }, "product_reference": "perl-DB_File-2:1.806-90.4.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.ppc" }, "product_reference": "perl-DB_File-2:1.806-90.4.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.s390" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.s390x" }, "product_reference": "perl-DB_File-2:1.806-90.4.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-DB_File-2:1.806-90.4.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-DB_File-2:1.806-90.4.x86_64" }, "product_reference": "perl-DB_File-2:1.806-90.4.x86_64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.i386 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.i386" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.i386", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ia64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.ia64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ia64", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.ppc as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.ppc" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.ppc", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.s390" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.s390x as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.s390x" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.s390x", "relates_to_product_reference": "3WS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-suidperl-2:5.8.0-90.4.x86_64 as a component of Red Hat Enterprise Linux WS version 3", "product_id": "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" }, "product_reference": "perl-suidperl-2:5.8.0-90.4.x86_64", "relates_to_product_reference": "3WS" } ] }, "vulnerabilities": [ { "cve": "CVE-2004-0976", "discovery_date": "2004-09-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1617339" } ], "notes": [ { "category": "description", "text": "Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.", "title": "Vulnerability description" }, { "category": "summary", "text": "security flaw", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=140058\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.", "title": "Statement" } ], "product_status": { "fixed": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2004-0976" }, { "category": "external", "summary": "RHBZ#1617339", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617339" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2004-0976", "url": "https://www.cve.org/CVERecord?id=CVE-2004-0976" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2004-0976", "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-0976" } ], "release_date": "2004-09-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2005-12-20T15:00:00+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.", "product_ids": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2005:881" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "security flaw" }, { "cve": "CVE-2005-0448", "discovery_date": "2005-03-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1617524" } ], "notes": [ { "category": "description", "text": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", "title": "Vulnerability description" }, { "category": "summary", "text": "security flaw", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-0448" }, { "category": "external", "summary": "RHBZ#1617524", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617524" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-0448", "url": "https://www.cve.org/CVERecord?id=CVE-2005-0448" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-0448", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-0448" } ], "release_date": "2005-03-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2005-12-20T15:00:00+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.", "product_ids": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2005:881" } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "security flaw" }, { "cve": "CVE-2005-3962", "discovery_date": "2005-12-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1617848" } ], "notes": [ { "category": "description", "text": "Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.", "title": "Vulnerability description" }, { "category": "summary", "text": "security flaw", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2005-3962" }, { "category": "external", "summary": "RHBZ#1617848", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1617848" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2005-3962", "url": "https://www.cve.org/CVERecord?id=CVE-2005-3962" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2005-3962", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-3962" } ], "release_date": "2005-12-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2005-12-20T15:00:00+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network. To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.", "product_ids": [ "3AS:perl-2:5.8.0-90.4.i386", "3AS:perl-2:5.8.0-90.4.ia64", "3AS:perl-2:5.8.0-90.4.ppc", "3AS:perl-2:5.8.0-90.4.s390", "3AS:perl-2:5.8.0-90.4.s390x", "3AS:perl-2:5.8.0-90.4.src", "3AS:perl-2:5.8.0-90.4.x86_64", "3AS:perl-CGI-2:2.89-90.4.i386", "3AS:perl-CGI-2:2.89-90.4.ia64", "3AS:perl-CGI-2:2.89-90.4.ppc", "3AS:perl-CGI-2:2.89-90.4.s390", "3AS:perl-CGI-2:2.89-90.4.s390x", "3AS:perl-CGI-2:2.89-90.4.x86_64", "3AS:perl-CPAN-2:1.61-90.4.i386", "3AS:perl-CPAN-2:1.61-90.4.ia64", "3AS:perl-CPAN-2:1.61-90.4.ppc", "3AS:perl-CPAN-2:1.61-90.4.s390", "3AS:perl-CPAN-2:1.61-90.4.s390x", "3AS:perl-CPAN-2:1.61-90.4.x86_64", "3AS:perl-DB_File-2:1.806-90.4.i386", "3AS:perl-DB_File-2:1.806-90.4.ia64", "3AS:perl-DB_File-2:1.806-90.4.ppc", "3AS:perl-DB_File-2:1.806-90.4.s390", "3AS:perl-DB_File-2:1.806-90.4.s390x", "3AS:perl-DB_File-2:1.806-90.4.x86_64", "3AS:perl-suidperl-2:5.8.0-90.4.i386", "3AS:perl-suidperl-2:5.8.0-90.4.ia64", "3AS:perl-suidperl-2:5.8.0-90.4.ppc", "3AS:perl-suidperl-2:5.8.0-90.4.s390", "3AS:perl-suidperl-2:5.8.0-90.4.s390x", "3AS:perl-suidperl-2:5.8.0-90.4.x86_64", "3Desktop:perl-2:5.8.0-90.4.i386", "3Desktop:perl-2:5.8.0-90.4.ia64", "3Desktop:perl-2:5.8.0-90.4.ppc", "3Desktop:perl-2:5.8.0-90.4.s390", "3Desktop:perl-2:5.8.0-90.4.s390x", "3Desktop:perl-2:5.8.0-90.4.src", "3Desktop:perl-2:5.8.0-90.4.x86_64", "3Desktop:perl-CGI-2:2.89-90.4.i386", "3Desktop:perl-CGI-2:2.89-90.4.ia64", "3Desktop:perl-CGI-2:2.89-90.4.ppc", "3Desktop:perl-CGI-2:2.89-90.4.s390", "3Desktop:perl-CGI-2:2.89-90.4.s390x", "3Desktop:perl-CGI-2:2.89-90.4.x86_64", "3Desktop:perl-CPAN-2:1.61-90.4.i386", "3Desktop:perl-CPAN-2:1.61-90.4.ia64", "3Desktop:perl-CPAN-2:1.61-90.4.ppc", "3Desktop:perl-CPAN-2:1.61-90.4.s390", "3Desktop:perl-CPAN-2:1.61-90.4.s390x", "3Desktop:perl-CPAN-2:1.61-90.4.x86_64", "3Desktop:perl-DB_File-2:1.806-90.4.i386", "3Desktop:perl-DB_File-2:1.806-90.4.ia64", "3Desktop:perl-DB_File-2:1.806-90.4.ppc", "3Desktop:perl-DB_File-2:1.806-90.4.s390", "3Desktop:perl-DB_File-2:1.806-90.4.s390x", "3Desktop:perl-DB_File-2:1.806-90.4.x86_64", "3Desktop:perl-suidperl-2:5.8.0-90.4.i386", "3Desktop:perl-suidperl-2:5.8.0-90.4.ia64", "3Desktop:perl-suidperl-2:5.8.0-90.4.ppc", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390", "3Desktop:perl-suidperl-2:5.8.0-90.4.s390x", "3Desktop:perl-suidperl-2:5.8.0-90.4.x86_64", "3ES:perl-2:5.8.0-90.4.i386", "3ES:perl-2:5.8.0-90.4.ia64", "3ES:perl-2:5.8.0-90.4.ppc", "3ES:perl-2:5.8.0-90.4.s390", "3ES:perl-2:5.8.0-90.4.s390x", "3ES:perl-2:5.8.0-90.4.src", "3ES:perl-2:5.8.0-90.4.x86_64", "3ES:perl-CGI-2:2.89-90.4.i386", "3ES:perl-CGI-2:2.89-90.4.ia64", "3ES:perl-CGI-2:2.89-90.4.ppc", "3ES:perl-CGI-2:2.89-90.4.s390", "3ES:perl-CGI-2:2.89-90.4.s390x", "3ES:perl-CGI-2:2.89-90.4.x86_64", "3ES:perl-CPAN-2:1.61-90.4.i386", "3ES:perl-CPAN-2:1.61-90.4.ia64", "3ES:perl-CPAN-2:1.61-90.4.ppc", "3ES:perl-CPAN-2:1.61-90.4.s390", "3ES:perl-CPAN-2:1.61-90.4.s390x", "3ES:perl-CPAN-2:1.61-90.4.x86_64", "3ES:perl-DB_File-2:1.806-90.4.i386", "3ES:perl-DB_File-2:1.806-90.4.ia64", "3ES:perl-DB_File-2:1.806-90.4.ppc", "3ES:perl-DB_File-2:1.806-90.4.s390", "3ES:perl-DB_File-2:1.806-90.4.s390x", "3ES:perl-DB_File-2:1.806-90.4.x86_64", "3ES:perl-suidperl-2:5.8.0-90.4.i386", "3ES:perl-suidperl-2:5.8.0-90.4.ia64", "3ES:perl-suidperl-2:5.8.0-90.4.ppc", "3ES:perl-suidperl-2:5.8.0-90.4.s390", "3ES:perl-suidperl-2:5.8.0-90.4.s390x", "3ES:perl-suidperl-2:5.8.0-90.4.x86_64", "3WS:perl-2:5.8.0-90.4.i386", "3WS:perl-2:5.8.0-90.4.ia64", "3WS:perl-2:5.8.0-90.4.ppc", "3WS:perl-2:5.8.0-90.4.s390", "3WS:perl-2:5.8.0-90.4.s390x", "3WS:perl-2:5.8.0-90.4.src", "3WS:perl-2:5.8.0-90.4.x86_64", "3WS:perl-CGI-2:2.89-90.4.i386", "3WS:perl-CGI-2:2.89-90.4.ia64", "3WS:perl-CGI-2:2.89-90.4.ppc", "3WS:perl-CGI-2:2.89-90.4.s390", "3WS:perl-CGI-2:2.89-90.4.s390x", "3WS:perl-CGI-2:2.89-90.4.x86_64", "3WS:perl-CPAN-2:1.61-90.4.i386", "3WS:perl-CPAN-2:1.61-90.4.ia64", "3WS:perl-CPAN-2:1.61-90.4.ppc", "3WS:perl-CPAN-2:1.61-90.4.s390", "3WS:perl-CPAN-2:1.61-90.4.s390x", "3WS:perl-CPAN-2:1.61-90.4.x86_64", "3WS:perl-DB_File-2:1.806-90.4.i386", "3WS:perl-DB_File-2:1.806-90.4.ia64", "3WS:perl-DB_File-2:1.806-90.4.ppc", "3WS:perl-DB_File-2:1.806-90.4.s390", "3WS:perl-DB_File-2:1.806-90.4.s390x", "3WS:perl-DB_File-2:1.806-90.4.x86_64", "3WS:perl-suidperl-2:5.8.0-90.4.i386", "3WS:perl-suidperl-2:5.8.0-90.4.ia64", "3WS:perl-suidperl-2:5.8.0-90.4.ppc", "3WS:perl-suidperl-2:5.8.0-90.4.s390", "3WS:perl-suidperl-2:5.8.0-90.4.s390x", "3WS:perl-suidperl-2:5.8.0-90.4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2005:881" } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "security flaw" } ] }
ghsa-2jcf-pv2j-gqvq
Vulnerability from github
Published
2022-05-03 03:14
Modified
2022-05-03 03:14
Details
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
{ "affected": [], "aliases": [ "CVE-2005-0448" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2005-05-02T04:00:00Z", "severity": "LOW" }, "details": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", "id": "GHSA-2jcf-pv2j-gqvq", "modified": "2022-05-03T03:14:03Z", "published": "2022-05-03T03:14:03Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-0448" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "type": "WEB", "url": "https://usn.ubuntu.com/94-1" }, { "type": "WEB", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "type": "WEB", "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "type": "WEB", "url": "http://secunia.com/advisories/14531" }, { "type": "WEB", "url": "http://secunia.com/advisories/17079" }, { "type": "WEB", "url": "http://secunia.com/advisories/18075" }, { "type": "WEB", "url": "http://secunia.com/advisories/18517" }, { "type": "WEB", "url": "http://secunia.com/advisories/55314" }, { "type": "WEB", "url": "http://www.debian.org/security/2005/dsa-696" }, { "type": "WEB", "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/advisories/8704" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/12767" } ], "schema_version": "1.4.0", "severity": [] }
gsd-2005-0448
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2005-0448", "description": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", "id": "GSD-2005-0448", "references": [ "https://www.suse.com/security/cve/CVE-2005-0448.html", "https://www.debian.org/security/2005/dsa-696", "https://access.redhat.com/errata/RHSA-2005:881", "https://access.redhat.com/errata/RHSA-2005:674" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2005-0448" ], "details": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.", "id": "GSD-2005-0448", "modified": "2023-12-13T01:20:08.365760Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security@debian.org", "ID": "CVE-2005-0448", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "DSA-696", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-696" }, { "name": "HPSBUX01208", "refsource": "HP", "url": "http://www.securityfocus.com/advisories/8704" }, { "name": "RHSA-2005:881", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "name": "MDKSA-2005:079", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "name": "55314", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/55314" }, { "name": "18075", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18075" }, { "name": "12767", "refsource": "BID", "url": "http://www.securityfocus.com/bid/12767" }, { "name": "CLSA-2006:1056", "refsource": "CONECTIVA", "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "name": "oval:org.mitre.oval:def:10475", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "name": "20060101-01-U", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U" }, { "name": "FLSA-2006:152845", "refsource": "FEDORA", "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "name": "oval:org.mitre.oval:def:728", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "name": "GLSA-200501-38", "refsource": "GENTOO", "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "name": "18517", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/18517" }, { "name": "RHSA-2005:674", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "name": "17079", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17079" }, { "name": "14531", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/14531" }, { "name": "USN-94-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/94-1/" }, { "name": "SSRT5938", "refsource": "HP", "url": "http://www.securityfocus.com/advisories/8704" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "security@debian.org", "ID": "CVE-2005-0448" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ] }, "references": { "reference_data": [ { "name": "DSA-696", "refsource": "DEBIAN", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.debian.org/security/2005/dsa-696" }, { "name": "GLSA-200501-38", "refsource": "GENTOO", "tags": [ "Patch", "Vendor Advisory" ], "url": "http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml" }, { "name": "RHSA-2005:881", "refsource": "REDHAT", "tags": [], "url": "http://www.redhat.com/support/errata/RHSA-2005-881.html" }, { "name": "18075", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/18075" }, { "name": "12767", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/12767" }, { "name": "20060101-01-U", "refsource": "SGI", "tags": [], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U" }, { "name": "14531", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/14531" }, { "name": "18517", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/18517" }, { "name": "FLSA-2006:152845", "refsource": "FEDORA", "tags": [], "url": "http://fedoranews.org/updates/FEDORA--.shtml" }, { "name": "RHSA-2005:674", "refsource": "REDHAT", "tags": [], "url": "http://www.redhat.com/support/errata/RHSA-2005-674.html" }, { "name": "17079", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/17079" }, { "name": "CLSA-2006:1056", "refsource": "CONECTIVA", "tags": [], "url": "http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=001056" }, { "name": "MDKSA-2005:079", "refsource": "MANDRIVA", "tags": [], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:079" }, { "name": "HPSBUX01208", "refsource": "HP", "tags": [], "url": "http://www.securityfocus.com/advisories/8704" }, { "name": "55314", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/55314" }, { "name": "oval:org.mitre.oval:def:728", "refsource": "OVAL", "tags": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A728" }, { "name": "oval:org.mitre.oval:def:10475", "refsource": "OVAL", "tags": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475" }, { "name": "USN-94-1", "refsource": "UBUNTU", "tags": [], "url": "https://usn.ubuntu.com/94-1/" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 1.2, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 1.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "LOW", "userInteractionRequired": false } }, "lastModifiedDate": "2018-10-03T21:29Z", "publishedDate": "2005-05-02T04:00Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.