CVE-2005-0448
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to...
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
Exploit likelihood
What each source reports
NVD Score used
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
CVE-2005-0448- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
CVE-2005-0448- Updated
- 2026-11-02
EUVDEUVD-2005-0449 No score
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
EUVD-2005-0449- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2jcf-pv2j-gqvq No score
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to...
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
GHSA-2jcf-pv2j-gqvq- Updated
- 2026-11-02
OSV No score
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
CVE-2005-0448- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0448 No score
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452.
- Record
DEBIAN-CVE-2005-0448- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perlDebian:12 |
before 5.8.4-7 | 5.8.4-7 |
perlDebian:13 |
before 5.8.4-7 | 5.8.4-7 |
perlDebian:14 |
before 5.8.4-7 | 5.8.4-7 |
perlDebian:4.0 From an advisory covering 4 CVEs |
before 5.8.8-7etch5, plus listed versions 5.8.8-75.8.8-7etch15.8.8-7etch25.8.8-7etch35.8.8-7etch4 |
5.8.8-7etch5 |
perlDebian:3.0 |
before 5.6.1-8.9, plus listed versions 5.6.1-8.75.6.1-8.8 |
5.6.1-8.9 |
perlRed Hat:enterprise_linux:4::as |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-debuginfoRed Hat:enterprise_linux:4::as |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-suidperlRed Hat:enterprise_linux:4::as |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perlRed Hat:enterprise_linux:4::desktop |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-debuginfoRed Hat:enterprise_linux:4::desktop |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-suidperlRed Hat:enterprise_linux:4::desktop |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perlRed Hat:enterprise_linux:4::es |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-debuginfoRed Hat:enterprise_linux:4::es |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-suidperlRed Hat:enterprise_linux:4::es |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perlRed Hat:enterprise_linux:4::ws |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-debuginfoRed Hat:enterprise_linux:4::ws |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perl-suidperlRed Hat:enterprise_linux:4::ws |
before 3:5.8.5-16.RHEL4 | 3:5.8.5-16.RHEL4 |
perlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perl-CGIRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 2:2.89-90.4 | 2:2.89-90.4 |
perl-CPANRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 2:1.61-90.4 | 2:1.61-90.4 |
perl-DB_FileRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 2:1.806-90.4 | 2:1.806-90.4 |
perl-suidperlRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perl-CGIRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 2:2.89-90.4 | 2:2.89-90.4 |
perl-CPANRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 2:1.61-90.4 | 2:1.61-90.4 |
perl-DB_FileRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 2:1.806-90.4 | 2:1.806-90.4 |
perl-suidperlRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perl-CGIRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 2:2.89-90.4 | 2:2.89-90.4 |
perl-CPANRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 2:1.61-90.4 | 2:1.61-90.4 |
perl-DB_FileRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 2:1.806-90.4 | 2:1.806-90.4 |
perl-suidperlRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
perl-CGIRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 2:2.89-90.4 | 2:2.89-90.4 |
perl-CPANRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 2:1.61-90.4 | 2:1.61-90.4 |
perl-DB_FileRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 2:1.806-90.4 | 2:1.806-90.4 |
perl-suidperlRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 2:5.8.0-90.4 | 2:5.8.0-90.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0448 is a low vulnerability (CVSS 1.2) in Larry Wall Perl, published March 12, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in perl 5.8.4-7.
References
debian.org/security/2005/dsa-696
securityfocus.com/advisories/8704
redhat.com/support/errata/RHSA-2005-881.html
mandriva.com/security/advisories?name=MDKSA-2005:079
secunia.com/advisories/55314
Show 48 moreShow less
distro.conectiva.com.br/atualizacoes?id=a&anuncio=001056
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10475
fedoranews.org/updates/FEDORA--.shtml
gentoo.org/security/en/glsa/glsa-200501-38.xml
usn.ubuntu.com/94-1
nvd.nist.gov/vuln/detail/CVE-2005-0448
github.com/advisories/GHSA-2jcf-pv2j-gqvq
security-tracker.debian.org/tracker/CVE-2005-0448
access.redhat.com/errata/RHSA-2005:674
bugzilla.redhat.com/show_bug.cgi?id=127023
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_674.json
cve.org/CVERecord?id=CVE-2005-0448