CVE-2012-2451

CVE-2012-2451 describes a vulnerability in the Config::IniFiles module for Perl, affecting versions prior to 2.71, specifically the shlomi_fish config-inifiles product. This flaw allows local users to overwrite arbitrary files through a symlink attack due to the module creating temporary files with predictable names. The vulnerability has a CVSS score of 3.6 (low severity), indicating a local attack vector with low attack complexity, potentially leading to partial integrity and availability impacts. While it might only be exploitable by writing in the same directory as the .ini file, which could limit privilege escalation, it still poses a risk for file manipulation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, suggesting a low level of public awareness or concern regarding this specific vulnerability.