diff options
| author | Remko Lodder <remko@FreeBSD.org> | 2006-04-23 10:25:26 +0000 |
|---|---|---|
| committer | Remko Lodder <remko@FreeBSD.org> | 2006-04-23 10:25:26 +0000 |
| commit | 1d4bde5eb63ed090dee69eebfd11a5080dd1a465 (patch) | |
| tree | 17e4092c058e5cbfb433e607620698f09eb6a800 | |
| parent | Upgrade module apache-1.270-3. (diff) | |
Document p5-DBI -- insecure temporary file creation vulnerability.
Notes
Notes:
svn path=/head/; revision=160215
| -rw-r--r-- | security/vuxml/vuln.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index d8a07ee17836..308913428eb9 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,38 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8cfb6f42-d2b0-11da-a672-000e0c2e438a"> + <topic>p5-DBI -- insecure temporary file creation + vulnerability</topic> + <affects> + <package> + <name>p5-DBI</name> + <name>p5-DBI-137</name> + <range><lt>1.48</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Javier Fernández-Sanguino Peña reports:</p> + <blockquote cite="http://www.debian.org/security/2005/dsa-658"> + <p>The DBI library, the Perl5 database interface, creates a + temporary PID file in an insecure manner. This can be + exploited by a malicious user to overwrite arbitrary files + owned by the person executing the parts of the library.</p> + </blockquote> + </body> + </description> + <references> + <bid>12360</bid> + <cvename>CAN-2005-0077</cvename> + <url>http://www.debian.org/security/2005/dsa-658</url> + </references> + <dates> + <discovery>2005-01-25</discovery> + <entry>2006-04-23</entry> + </dates> + </vuln> + <vuln vid="e0b342a1-d2ae-11da-a672-000e0c2e438a"> <topic>wordpress -- full path disclosure</topic> <affects> |