Vulnerabilities > CVE-2011-4115 - Unspecified vulnerability in Cpan Parallel::Forkmanager

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
cpan
nessus

Summary

Parallel::ForkManager module before 1.0.0 for Perl does not properly handle temporary files.

Vulnerable Configurations

Part Description Count
Application
Cpan
13

Nessus

NASL familyGentoo Local Security Checks
NASL idGENTOO_GLSA-201310-11.NASL
descriptionThe remote host is affected by the vulnerability described in GLSA-201310-11 (Perl Parallel-ForkManager Module: Insecure temporary file usage) The Perl Parallel-ForkManager module does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application. Workaround : There is no known workaround at this time.
last seen2020-06-01
modified2020-06-02
plugin id70487
published2013-10-18
reporterThis script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/70487
titleGLSA-201310-11 : Perl Parallel-ForkManager Module: Insecure temporary file usage