diff options
| author | remko <remko@FreeBSD.org> | 2006-04-23 10:25:26 +0000 |
|---|---|---|
| committer | remko <remko@FreeBSD.org> | 2006-04-23 10:25:26 +0000 |
| commit | bbd65136745e276b45ba78013d7813d496e507ae (patch) | |
| tree | 0c23143bfc20f9584fed008b73426faea41e0228 | |
| parent | 55430d1ca65cfe1a5eb55839f9135f5c71dfd060 (diff) | |
| download | FreeBSD-ports-bbd65136745e276b45ba78013d7813d496e507ae.zip FreeBSD-ports-bbd65136745e276b45ba78013d7813d496e507ae.tar.gz | |
Document p5-DBI -- insecure temporary file creation vulnerability.
| -rw-r--r-- | security/vuxml/vuln.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d8a07ee..3089134 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,38 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8cfb6f42-d2b0-11da-a672-000e0c2e438a"> + <topic>p5-DBI -- insecure temporary file creation + vulnerability</topic> + <affects> + <package> + <name>p5-DBI</name> + <name>p5-DBI-137</name> + <range><lt>1.48</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Javier Fernández-Sanguino Peña reports:</p> + <blockquote cite="http://www.debian.org/security/2005/dsa-658"> + <p>The DBI library, the Perl5 database interface, creates a + temporary PID file in an insecure manner. This can be + exploited by a malicious user to overwrite arbitrary files + owned by the person executing the parts of the library.</p> + </blockquote> + </body> + </description> + <references> + <bid>12360</bid> + <cvename>CAN-2005-0077</cvename> + <url>http://www.debian.org/security/2005/dsa-658</url> + </references> + <dates> + <discovery>2005-01-25</discovery> + <entry>2006-04-23</entry> + </dates> + </vuln> + <vuln vid="e0b342a1-d2ae-11da-a672-000e0c2e438a"> <topic>wordpress -- full path disclosure</topic> <affects> |
