clipedit in the Clipboard module for Perl allows local users to delete arbitrary files via a symlink attack on /tmp/clipedit$$.
References
Link | Resource |
---|---|
https://rt.cpan.org/Public/Bug/Display.html?id=98435 | Issue Tracking Patch Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=1135624 | Issue Tracking Third Party Advisory |
http://www.securityfocus.com/bid/69473 | Third Party Advisory VDB Entry |
http://www.openwall.com/lists/oss-security/2014/08/30/2 | Mailing List Third Party Advisory |
Configurations
Information
Published : 2018-01-08 11:29
Updated : 2018-02-02 09:39
NVD link : CVE-2014-5509
Mitre link : CVE-2014-5509
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
clipboard_project
- clipboard