GCVE - cpe:2.3:a:roderich_schupp:par-packer

Approved changes feed: RSS · Atom

cpe:2.3:a:roderich_schupp:par-packer_module:1.007:*:*:*:*:*:*:*

part: a version: 1.007 update: *

Vendor	Roderich Schupp (`d2fb3d2d-b4a4-5b5e-8daa-f42d2210f650`)
Product	Par Packer Module (`4d0c92cc-f64b-5053-9d10-3549b51d4ac1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:cpan/par-packer`	purl2cpe	2026-06-01 10:13:48.168444
`pkg:deb/debian/libpar-packer-perl`	purl2cpe	2026-06-01 10:13:48.168446
`pkg:deb/ubuntu/libpar-packer-perl`	purl2cpe	2026-06-01 10:13:48.168447
`pkg:github/rschupp/par-packer`	purl2cpe	2026-06-01 10:13:48.168448
`pkg:rpm/fedora/perl-par-packer`	purl2cpe	2026-06-01 10:13:48.168450
`pkg:rpm/opensuse/perl-par-packer`	purl2cpe	2026-06-01 10:13:48.168451

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4114`	vulnerable	2026-06-08 04:59:29.503114	Details available The par_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program. NOTE: a similar vulnerability was reported for PAR, but this has been assigned a different CVE identifier. Published: 2012-01-13T18:00:00.000Z Updated: 2024-08-07T00:01:50.443Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071091.html https://bugzilla.redhat.com/show_bug.cgi?id=753955 http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071099.html http://www.openwall.com/lists/oss-security/2011/11/04/2 https://rt.cpan.org/Public/Bug/Display.html?id=69560	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.