CyberRota Analysis
AI-GeneratedVersions of Data::DisjointSet::Shared prior to 0.02 for Perl are vulnerable due to the creation of a world-readable mmap backing file in shared directories like /tmp or /dev/shm, allowing any local user to access sensitive IPC payloads. The absence of O_EXCL and O_NOFOLLOW flags enables local attackers to exploit this vulnerability by planting symlinks or files, potentially leading to unauthorized data exposure. Organizations using affected versions should prioritize patching to mitigate the risk of local privilege escalation and data leakage.
Original NVD Description
Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022 the file is created mode 0644 (world-readable). O_NOFOLLOW is absent, so a symlink planted at the path is followed, and O_EXCL is absent, so the open silently uses a pre-planted file instead of failing. A "Shared" segment naturally lives in a shared directory such as /tmp or /dev/shm, where any local user can read the IPC payloads stored in the world-readable segment, and a pre-planted file or symlink at the path lets a local attacker win a pre-creation race or redirect the open.