CVE-2008-5302 - CVE House
Back to Database
Status published Medium CVE-2008-5302

Race condition in the rmtree function in File::Path 1.08 and...

Vulnerability Description

Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5302

Credits & Attribution

No credits recorded in the NVD database.

References

More from perl

View All →
CVE-2025-40909
Perl threads have a working directory race condition where file operations may target unintended paths
Unknown 0
CVE-2025-1828
Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions
Unknown 0
CVE-2024-56406
Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes
Unknown 0
CVE-2022-48522
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based...
Critical 9.8
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass....
High 7.8

Affected Vendor

Affected Software

file\
Vulnerable Versions:
\

Timeline

Official Publish: December 1st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.