CVE-2011-4363

Published: Oct 7, 2012Modified: Apr 29, 2026

2.6

Vector

AV:L/AC:H/Au:N/C:N/I:P/A:P

Exploitability: 1.9 / Impact: 4.9

Source: NVD

Description

ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arbitrary files via a symlink attack on /tmp/TTYDEVS.

Affected (1)

Products: Frii: Proc\

Frii

1 product

Proc\

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Frii Proc\	Version \ processtable

Running on/with	Platform Versions
Perl Perl	All versions

Related CWEs

CWE-59

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (16)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650500

Source: secalert@redhat.com

http://secunia.com/advisories/47015

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/11/30/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/11/30/3

Source: secalert@redhat.com

http://www.osvdb.org/77428

Source: secalert@redhat.com

http://www.securityfocus.com/bid/50868

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4363

Source: secalert@redhat.com

https://rt.cpan.org/Public/Bug/Display.html?id=72862

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650500