CVE-2011-5060

CVE-2011-5060 describes a local file overwrite vulnerability in the PAR module (before version 1.003) for Perl, specifically impacting the roderich_schupp par-packer_module. The flaw arises from the par_mktmpdir function creating temporary files in a predictably named directory without proper ownership and permission verification, allowing local users to overwrite files when another user extracts a PAR packed program. With a CVSS score of 3.3 (AV:L/AC:M/Au:N/C:N/I:P/A:P), this vulnerability requires local access and medium attack complexity, potentially leading to partial integrity and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.