Test ID:	1.3.6.1.4.1.25623.1.0.50480
Category:	Ubuntu Local Security Checks
Title:	Ubuntu 4.10 USN-44-1 (perl)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to perl announced via advisory USN-44-1. A race condition and possible information leak has been discovered in Perl's File::Path::rmtree(). This function changes the permission of files and directories before removing them to avoid problems with wrong permissions. However, they were made readable and writable not only for the owner, but for the entire world, which opened a race condition and a possible information leak (if the actual removal of a file/directory failed for some reason). The following packages are affected: perl-modules Solution: The problem can be corrected by upgrading the affected package to version 5.8.4-2ubuntu0.2. In general, a standard system upgrade is sufficient to effect the necessary changes. http://lists.ubuntu.com/archives/ubuntu-security-announce/2004-December/000046.html Risk factor : Medium CVSS Score: 2.6
Cross-Ref:	BugTraq ID: 12072 Common Vulnerability Exposure (CVE) ID: CVE-2004-0452 http://www.securityfocus.com/bid/12072 Bugtraq: 20050111 [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl) (Google Search) http://marc.info/?l=bugtraq&m=110547693019788&w=2 Debian Security Information: DSA-620 (Google Search) http://www.debian.org/security/2004/dsa-620 http://fedoranews.org/updates/FEDORA--.shtml http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938 http://www.redhat.com/support/errata/RHSA-2005-103.html http://www.redhat.com/support/errata/RHSA-2005-105.html http://secunia.com/advisories/12991 http://secunia.com/advisories/18517 http://secunia.com/advisories/55314 SGI Security Advisory: 20060101-01-U ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U https://www.ubuntu.com/usn/usn-44-1/ XForce ISS Database: perl-filepathrmtree-insecure-permissions(18650) https://exchange.xforce.ibmcloud.com/vulnerabilities/18650
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.