CVE-2011-4116

ADVISORY - debian

Summary

_is_safe in the File::Temp module for Perl does not properly handle symlinks.

perl (unimportant; bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776268) http://thread.gmane.org/gmane.comp.security.oss.general/6174/focus=6177 https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14

EPSS Score⁠: 0.00738 (0.719)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-59⁠

Improper Link Resolution Before File Access ('Link Following')

ADVISORY - redhat

CWE-283⁠

Unverified Ownership

Impacted images

Advisories

Debian

CREATED

5 years ago

UPDATED

5 hours ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
debian/perl	deb	debian	12	>=5.36.0-7+deb12u2	Not yet available
debian/perl	deb	debian	11	>=5.32.1-4+deb11u3	Not yet available
debian/perl	deb	debian	unstable	>=5.40.1-5	Not yet available
debian/perl	deb	debian	13	>=5.40.1-5	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

5 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-59⁠

CVSS SCORE

7.5high

Ubuntu

CREATED

5 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5low

Red Hat

CREATED

14 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-283⁠

CVSS SCORE

1.9low

intheWild

CREATED

4 months ago

UPDATED

4 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY