SecuritySpace - CVE-2016-10374

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-10374

Description: perltidy through 20160302, as used by perlcritic, check-all-the- things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.

Test IDs: 1.3.6.1.4.1.25623.1.1.10.2017.0301 1.3.6.1.4.1.25623.1.0.872749 1.3.6.1.4.1.25623.1.0.872752

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-10374

CVE ID:	CVE-2016-10374
Description:	perltidy through 20160302, as used by perlcritic, check-all-the- things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2017.0301 1.3.6.1.4.1.25623.1.0.872749 1.3.6.1.4.1.25623.1.0.872752
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-10374