CVE-2004-0452: Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write perm...

Security readout for executives and security teams

CVE-2004-0452 is an old Perl File::Path flaw where rmtree could briefly make files or directories world-readable and writable. A local user could abuse that race to delete arbitrary files or possibly read data. The business risk is mainly legacy, multi-user systems still running affected Perl versions. Exposure is most likely on legacy Unix or Linux systems with Perl 5.6.1 or 5.8.4, especially where untrusted local users exist or scripts remove attacker-influenced paths. Modern supported distributions are less likely exposed if vendor security updates were applied. Treat this as a legacy exposure cleanup item unless affected multi-user systems remain in production. Prioritize remediation on shared servers, hosting environments, build hosts, and systems with sensitive local files. There is no source-backed evidence of active exploitation in the provided bundle. Mitigation focus: Apply relevant vendor Perl/File::Path security updates for affected systems.; Replace unsupported Perl 5.6.1 or 5.8.4 deployments where feasible.; Review scripts using File::Path::rmtree on shared or user-influenced paths..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.