{"id":"CVE-2011-10007","aliases":["ALPINE-CVE-2011-10007","ALSA-2025:9517","ALSA-2025:9605","AZL-62239","AZL-62273","DEBIAN-CVE-2011-10007","DLA-4209-1","DSA-5936-1","EUVD-2011-5236","GHSA-cvg9-q978-4569","MGASA-2025-0278","OESA-2025-1646","OESA-2025-1678","OESA-2025-1679","OESA-2025-1680","OESA-2025-1681","OESA-2025-2608","RHSA-2025:9517","RHSA-2025:9605","RHSA-2025:9658","RHSA-2025:9740","RHSA-2025:9741","RLSA-2025:9517","RLSA-2025:9605","SUSE-SU-2025:02105-1","UBUNTU-CVE-2011-10007","USN-7620-1","openSUSE-SU-2025:15260-1"],"status":"published","title":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00859,"percentile":0.58784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2025-06-05T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"perl-file-find-rule","fixed_in":["0.35-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"perl-file-find-rule","fixed_in":["0.35-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"perl-file-find-rule","fixed_in":["0.35-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"perl-File-Find-Rule","fixed_in":["0.34-19.1.el9_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"perl-File-Find-Rule","fixed_in":["0.34-9.el8_10"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libfile-find-rule-perl","fixed_in":["0.34-4~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libfile-find-rule-perl","fixed_in":["0.34-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libfile-find-rule-perl","fixed_in":["0.34-4"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libfile-find-rule-perl","fixed_in":["0.34-1+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"perl-File-Find-Rule","fixed_in":["0.340.0-5.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-File-Find-Rule","fixed_in":["0.34-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"perl-File-Find-Rule","fixed_in":["0.34-4.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-File-Find-Rule","fixed_in":["0.34-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-File-Find-Rule","fixed_in":["0.34-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"perl-File-Find-Rule","fixed_in":["0.34-3.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"perl-File-Find-Rule","fixed_in":["0.34-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"perl-File-Find-Rule","fixed_in":["0:0.34-19.1.el9_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-File-Find-Rule","fixed_in":["0:0.34-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"perl-File-Find-Rule","fixed_in":["0:0.34-19.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-File-Find-Rule-Perl","fixed_in":["0:1.13-2.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"perl-File-Find-Rule","fixed_in":["0:0.33-5.el7_9.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"perl-File-Find-Rule","fixed_in":["0:0.34-19.1.el9_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"perl-File-Find-Rule","fixed_in":["0:0.34-9.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"perl-File-Find-Rule","fixed_in":["0.34-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libfile-find-rule-perl","fixed_in":["0.34-1ubuntu0.22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libfile-find-rule-perl","fixed_in":["0.34-3ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"perl-File-Find-Rule","fixed_in":["0.350.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"perl-file-find-rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"perl-file-find-rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl-file-find-rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-19.1.el9_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-9.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.34-15"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.34-15"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4~deb12u1"}]}],"versions":["0.34-3"]},{"source":"osv","ecosystem":"Debian:13","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-1+deb11u1"}]}],"versions":["0.34-1"]},{"source":"osv","ecosystem":"Debian:12","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4~deb12u1"}]}],"versions":["0.34-3"]},{"source":"osv","ecosystem":"Mageia:9","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.340.0-5.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-19.1.el9_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-19.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-File-Find-Rule-Perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-2.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33-5.el7_9.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-19.1.el9_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.34-9.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.33-1","0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-1ubuntu0.22.04.1"}]}],"versions":["0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3ubuntu0.24.04.1"}]}],"versions":["0.34-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-1ubuntu0.22.04.1"}]}],"versions":["0.34-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libfile-find-rule-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.34-3ubuntu0.24.04.1"}]}],"versions":["0.34-3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-File-Find-Rule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.350.0-1.1"}]}]}],"products":[{"vendor":"rclamp","product":"file::find::rule"}],"references":[{"url":"https://metacpan.org/release/RCLAMP/File-Find-Rule-0.34/source/lib/File/Find/Rule.pm#L423","tags":["web","article"]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=64504","tags":["issue-tracking","exploit","web","article"]},{"url":"https://github.com/richardc/perl-file-find-rule/pull/4","tags":["issue-tracking","exploit","fix","article"]},{"url":"https://github.com/richardc/perl-file-find-rule/commit/df58128bcee4c1da78c34d7f3fe1357e575ad56f.patch","tags":["patch","fix","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00006.html","tags":["web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/05/4","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/06/1","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/06/3","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-10007","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-cvg9-q978-4569"},{"url":"https://security.alpinelinux.org/vuln/CVE-2011-10007","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9517","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-10007","tags":["report"]},{"url":"https://bugzilla.redhat.com/2370424","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-9517.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9605","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-9605.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-10007","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0278.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34352","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/05/4","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5IU76LFGXLXKYPWUGOA3WJD5MKZXGVV6/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1646","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1678","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1679","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1680","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1681","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2608","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370424","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9517.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-10007","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9605.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9658","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9658.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9740","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9740.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9741","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9741.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9517","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9605","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502105-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1244148","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-10007","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2011-10007","tags":["report"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/30183067/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7620-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-10007","title":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T11:57:58.654Z","modified":"2025-06-11T12:27:11.87Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-5236","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T11:57:58Z","modified":"2025-06-11T12:27:11Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:26.351797Z"}],"ghsa":[{"id":"GHSA-cvg9-q978-4569","title":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()`...","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:31:09Z","modified":"2025-06-06T06:31:31Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:02:35.664515Z"}],"nvd":[{"id":"CVE-2011-10007","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22.807Z","modified":"2026-06-16T23:28:27.367Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:02:12.945371Z"}],"osv":[{"id":"ALPINE-CVE-2011-10007","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22.807Z","modified":"2026-11-03T06:30:05.314301113Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T06:41:39.834803Z"},{"id":"DEBIAN-CVE-2011-10007","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.  A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.  Example:  $ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\" $ perl -MFile::Find::Rule \\     -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22.807Z","modified":"2026-10-23T18:02:45.175495588Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"OESA-2025-1646","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-06-20T11:08:44Z","modified":"2026-08-18T01:18:00.32442927Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1678","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-06-27T11:08:46Z","modified":"2026-08-18T01:18:00.952769706Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1679","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-06-27T11:08:46Z","modified":"2026-08-18T01:18:00.215704029Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1680","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-06-27T11:08:46Z","modified":"2026-08-18T01:18:00.644239882Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1681","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-06-27T11:08:46Z","modified":"2026-08-18T01:18:00.181767552Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-2608","title":"perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories. %package help Summary : Alternative interface to File::Find Provides: perl-File-Find-Rule-doc %description help File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories. %prep %setup -q -n File-Find-Rule- %build export PERL_MM_OPT=\u0026amp;quot;\u0026amp;quot;  Makefile.PL INSTALLDIRS=vendor make\r\n\r\nSecurity Fix(es):\n\nFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u0026gt; \u0026quot;/tmp/poc/|id\u0026quot;\n$ perl -MFile::Find::Rule \\\n    -E \u0026apos;File::Find::Rule-\u0026gt;grep(\u0026quot;foo\u0026quot;)-\u0026gt;in(\u0026quot;/tmp/poc\u0026quot;)\u0026apos;\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)","status":"published","published":"2025-10-31T11:09:43Z","modified":"2026-08-18T01:19:18.051366987Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:9517","title":"Red Hat Security Advisory: perl-File-Find-Rule security update","status":"published","published":"2025-06-25T10:06:32Z","modified":"2026-06-30T10:30:58Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9605","title":"Red Hat Security Advisory: perl-File-Find-Rule security update","status":"published","published":"2025-06-25T10:06:37Z","modified":"2026-06-30T10:31:02Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9658","title":"Red Hat Security Advisory: perl-File-Find-Rule security update","status":"published","published":"2025-06-26T10:04:40Z","modified":"2026-06-30T10:31:08Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9740","title":"Red Hat Security Advisory: perl-File-Find-Rule-Perl security update","status":"published","published":"2025-06-26T10:04:45Z","modified":"2026-06-30T10:31:12Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9741","title":"Red Hat Security Advisory: perl-File-Find-Rule security update","status":"published","published":"2025-06-26T10:04:45Z","modified":"2026-06-30T10:31:12Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:9517","title":"Important: perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find.  It allows you to build rules which specify the desired files and directories.\n\nSecurity Fix(es):\n\n* perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:52.256858Z","modified":"2025-10-07T17:40:39.64855Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:9605","title":"Important: perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find.  It allows you to build rules which specify the desired files and directories.\n\nSecurity Fix(es):\n\n* perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:39:03.816508Z","modified":"2025-07-29T15:00:29.650714Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2011-10007","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\" $ perl -MFile::Find::Rule \\     -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:00Z","modified":"2026-02-04T04:07:56.515488Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:06.395274Z"},{"id":"ALSA-2025:9517","title":"Important: perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.  \n\nSecurity Fix(es):  \n\n  * perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-24T00:00:00Z","modified":"2026-10-29T11:32:19.225641861Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2025:9605","title":"Important: perl-File-Find-Rule security update","description":"File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.  \n\nSecurity Fix(es):  \n\n  * perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-25T00:00:00Z","modified":"2026-10-29T11:02:28.451441449Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-62239","title":"CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"AZL-62273","title":"CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22Z","modified":"2026-04-21T04:31:58.889072Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"CVE-2011-10007","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.\n\nA file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.\n\nExample:\n\n$ mkdir /tmp/poc; echo \u003e \"/tmp/poc/|id\"\n$ perl -MFile::Find::Rule \\\n    -E 'File::Find::Rule-\u003egrep(\"foo\")-\u003ein(\"/tmp/poc\")'\nuid=1000(user) gid=1000(user) groups=1000(user),100(users)","status":"published","published":"2025-06-05T12:15:22Z","modified":"2026-04-16T04:35:16.148511229Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DLA-4209-1","title":"libfile-find-rule-perl - security update","status":"published","published":"2025-06-05T00:00:00Z","modified":"2026-03-09T02:10:57.284549Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5936-1","title":"libfile-find-rule-perl - security update","status":"published","published":"2025-06-05T00:00:00Z","modified":"2026-03-09T02:11:26.074816Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0278","title":"Updated perl-File-Find-Rule packages fix security vulnerability","description":"File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code\nExecution when `grep()` encounters a crafted file name. (CVE-2011-10007)\n","status":"published","published":"2025-11-12T21:29:34Z","modified":"2026-04-16T04:43:27.776222798Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15260-1","title":"perl-File-Find-Rule-0.350.0-1.1 on GA media","description":"These are all security issues fixed in the perl-File-Find-Rule-0.350.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:33.554293Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:02105-1","title":"Security update for perl-File-Find-Rule","description":"This update for perl-File-Find-Rule fixes the following issues:\n\n- CVE-2011-10007: Fixed arbitrary code execution when `grep()` encounters a crafted filename (bsc#1244148).\n","status":"published","published":"2025-06-25T11:43:55Z","modified":"2026-03-23T04:48:31.199785Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"USN-7620-1","title":"File::Find::Rule vulnerability","description":"Kevin Ryde discovered that File::Find::Rule incorrectly handled certain\nfile names. An attacker could possibly use this issue to execute arbitrary\ncode.","status":"published","published":"2025-07-07T13:13:01Z","modified":"2026-04-27T18:08:11.315702Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}