CVE:CVE-2011-5060
CNNVD:CNNVD-201201-163
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。
Perl中的PAR模块1.003之前版本的par_mktmpdir函数中存在漏洞。当其在未验证目录所有权和权限的情况下，用预期的名字在此目录中创建临时文件时，本地用户可利用该漏洞在另一用户摘录PAR形式的程序时重写文件。
solution:Upgrade roderich_schupp par-packer_module to a higher version than 1.002,0.63,0.64,0.65,0.66,0.67,0.68,0.69,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.77,0.78,0.79,0.80,0.81,0.82,0.83,0.85,0.86,0.87,0.88,0.89,0.90,0.91,0.92,0.93,0.94,0.941,0.942,0.951,0.952,0.953,0.954,0.955,0.956,0.957,0.958,0.959,0.960,0.970,0.973,0.975,0.976,0.977,0.978,0.979,0.980,0.981,0.982,0.991,0.992_01,0.992_02,0.992_03,0.992_04,0.992_05,0.992_06,1.000,1.001,and avoid the version (,1.002],0.63,0.64,0.65,0.66,0.67,0.68,0.69,0.70,0.71,0.72,0.73,0.74,0.75,0.76,0.77,0.78,0.79,0.80,0.81,0.82,0.83,0.85,0.86,0.87,0.88,0.89,0.90,0.91,0.92,0.93,0.94,0.941,0.942,0.951,0.952,0.953,0.954,0.955,0.956,0.957,0.958,0.959,0.960,0.970,0.973,0.975,0.976,0.977,0.978,0.979,0.980,0.981,0.982,0.991,0.992_01,0.992_02,0.992_03,0.992_04,0.992_05,0.992_06,1.000,1.001