CVE Catalog
CVE-1999-1386
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.46%
37th percentile - higher than 37% of all known CVEs
Summary
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, allowing local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.
Risk Assessment
An attacker could exploit this vulnerability to overwrite critical system files, potentially leading to data loss or system integrity breaches.
Recommendation
It is recommended to upgrade to a newer version of Perl that is not vulnerable to this type of attack and to restrict access to script execution options by local users.
Original NVD description (English source)
Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.