Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-2827

21
FAUCET Score

CVE-2008-2827 describes a local privilege escalation vulnerability in the rmtree function within lib/File/Path.pm in Perl 5.10. This flaw allows a local attacker to modify permissions of arbitrary files through a symlink attack, distinct from previously identified issues. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), it indicates low attack complexity and requires local access, potentially leading to partial confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog and showing no active exploitation or significant community discussion, an ExploitDB entry (EDB-31959) confirms the existence of exploit code.

Impacted Technologies

VendorProductVersion(s)CPE
5.10CPE matchmatch criteria
cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.6MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.85%
Probability of exploitation in next 30 days
EPSS Percentile
54.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-31959 · Jun 23, 2008
This CVE's current EPSS score of 0.0085 is in the 87th percentile among its peer group of 3,052 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2008-2827Low

perl: insecure use of chmod in rmtree

Jun 20, 2008

References

bugs.debian.org / cgi-bin/bugreport.cgi
Exploit
lists.opensuse.org / opensuse-security-announce/2008-08/msg00006.html
rt.cpan.org / Public/Bug/Display.html
Exploit
secunia.com / advisories/30790
secunia.com / advisories/30837
secunia.com / advisories/31687
exchange.xforce.ibmcloud.com / vulnerabilities/43308
redhat.com / archives/fedora-package-announce/2008-June/msg01025.html
mandriva.com / security/advisories
securityfocus.com / bid/29902
securitytracker.com / id