CVE-1999-1386: Perl

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

Affected products

• Perl Perl: up to and including 5.004_04

Published 1999-12-31. Last modified 2026-06-16.