CVE-2011-4116

ADVISORY - debian

Summary

_is_safe in the File::Temp module for Perl does not properly handle symlinks.

perl (unimportant; bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776268) http://thread.gmane.org/gmane.comp.security.oss.general/6174/focus=6177 https://github.com/Perl-Toolchain-Gang/File-Temp/issues/14

EPSS Score⁠: 0.0052 (0.427)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-59⁠

Improper Link Resolution Before File Access ('Link Following')

ADVISORY - redhat

CWE-283⁠

Unverified Ownership

Impacted images

Advisories

Debian

CREATED

7 years ago

UPDATED

14 days ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
debian/perl	deb	debian	12	>0	Not yet available
debian/perl	deb	debian	14	>0	Not yet available
debian/perl	deb	debian	unstable	>0	Not yet available
debian/perl	deb	debian	13	>0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

7 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-59⁠

CVSS SCORE

3.3low

Ubuntu

CREATED

7 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

3.3low

Red Hat

CREATED

15 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-283⁠

CVSS SCORE

1.9low

intheWild

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY IDCVE-2011-4116⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY