CVE-2011-5060
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-5060
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Perl ‘par_mktmpdir’函数安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。 Perl中的PAR模块1.003之前版本的par_mktmpdir函数中存在漏洞。当其在未验证目录所有权和权限的情况下，用预期的名字在此目录中创建临时文件时，本地用户可利用该漏洞在另一用户摘录PAR形式的程序时重写文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-5060
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-5060
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=753955x_refsource_CONFIRM
- https://rt.cpan.org/Public/Bug/Display.html?id=69560x_refsource_CONFIRM
- http://cpansearch.perl.org/src/RSCHUPP/PAR-1.003/ChangeLogx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2011-5060
Same Patch Batch · n/a · 2012-01-13 · 14 CVEs total
| CVE-2011-2776 | super ‘Error()’本地权限提升漏洞 | |
| CVE-2011-2939 | Perl 数字错误漏洞 | |
| CVE-2011-3597 | IBM Perl Digest模块代码注入漏洞 | |
| CVE-2011-4057 | Wibu-Systems CodeMeter拒绝服务漏洞 | |
| CVE-2011-4114 | Perl 权限许可和访问控制问题漏洞 | |
| CVE-2012-0030 | Nova ‘project_id URI’参数安全绕过漏洞 | |
| CVE-2011-4788 | HP StorageWorks路径遍历漏洞 | |
| CVE-2011-4789 | HP Diagnostics Server ‘magentservice.exe’ 缓冲区溢出漏洞 | |
| CVE-2011-4925 | Terascale Open-Source资源/队列管理器权限许可和访问控制漏洞 | |
| CVE-2012-0309 | Cogent DataHub/Cascade DataHub/OPC DataHub 跨站脚本漏洞 | |
| CVE-2012-0310 | Cogent DataHub/Cascade DataHub/OPC DataHub CRLF注入漏洞 | |
| CVE-2012-0696 | IBM Cognos TM1 EV跨站脚本漏洞 | |
| CVE-2012-0697 | HP StorageWorks路径遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2011-5060
No comments yet