CVE-1999-1386

Summary

CVE-1999-1386 is a vulnerability affecting Perl 5.004_04 and earlier versions. This issue arises when the software follows symbolic links during execution with the -e option, enabling local users to overwrite arbitrary files through a symlink attack on the /tmp/perl-eaXXXXX file. This vulnerability poses a significant risk, as an attacker can manipulate critical system files, potentially leading to serious system compromise. To mitigate this threat, it is recommended that users upgrade their Perl installations to a version that addresses this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.