← All advisories

Medium severity5.5NVD Advisory· Published Dec 31, 1999· Updated Jun 16, 2026

CVE-1999-1386

CVE-1999-1386

Description

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Perl Foundation/Perl2 versions
cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*range: <=5.004_04
- (no CPE)range: <=5.004_04

Patches

Vulnerability mechanics

References

3

marc.infonvdExploitMailing List
www.iss.net/security_center/static/7243.phpnvdBroken Link
www.redhat.com/support/errata/rh50-errata-general.htmlnvdBroken Link

News mentions

0

No linked articles in our index yet.