CVE-2011-5060: The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory wi...

Security readout for executives and security teams

CVE-2011-5060 is a local file-overwrite risk in the Perl PAR module before 1.003. A shared system user could take advantage of predictable temporary directory handling when another user extracts a PAR-packed program. This is not shown as remotely exploitable or actively exploited in the provided sources. Exposure is most likely on systems using Perl PAR before 1.003, especially shared Unix-like hosts, build servers, or application servers where multiple local users exist and PAR-packed programs are extracted or run. Treat this as a targeted local-risk issue, not an internet-wide emergency. Prioritize shared servers, developer/build infrastructure, and any environment where PAR-packed Perl programs run under higher-value user accounts. Mitigation focus: Upgrade the Perl PAR module to version 1.003 or later where available.; Check Red Hat, CPAN, or OS package guidance for backported fixes.; Reduce untrusted local-user access on systems running affected PAR versions..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.