CVEvulnerability
CVE-2010-1168
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."
Affected configurations
• rafael garcia-suarez safe 2.08
• rafael garcia-suarez safe 2.09
• rafael garcia-suarez safe 2.11
• rafael garcia-suarez safe 2.13
• rafael garcia-suarez safe 2.14
• rafael garcia-suarez safe 2.15
• rafael garcia-suarez safe 2.16
• rafael garcia-suarez safe 2.17
• rafael garcia-suarez safe 2.18
• rafael garcia-suarez safe 2.19
• rafael garcia-suarez safe 2.20
• rafael garcia-suarez safe 2.21
• rafael garcia-suarez safe 2.22
• rafael garcia-suarez safe 2.23
• rafael garcia-suarez safe 2.24
Related
Weakness · not in database (1)
References
- http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html blogs.perl.org
- http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in blogs.sun.com
- http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes cpansearch.perl.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 kb.juniper.net
- http://secunia.com/advisories/40049 Vendor Advisory
- http://secunia.com/advisories/40052 Vendor Advisory
- http://secunia.com/advisories/42402 secunia.com
- http://securitytracker.com/id?1024062 Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/05/20/5 www.openwall.com
- http://www.redhat.com/support/errata/RHSA-2010-0457.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0458.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3075 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=576508 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807 oval.cisecurity.org
- http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html blogs.perl.org
- http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in blogs.sun.com
- http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes cpansearch.perl.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 kb.juniper.net
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 kb.juniper.net
- http://secunia.com/advisories/40049 Vendor Advisory
- http://secunia.com/advisories/40052 Vendor Advisory
- http://secunia.com/advisories/42402 secunia.com
- http://securitytracker.com/id?1024062 Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 www.mandriva.com
- http://www.openwall.com/lists/oss-security/2010/05/20/5 www.openwall.com
- http://www.redhat.com/support/errata/RHSA-2010-0457.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0458.html Vendor Advisory
- http://www.vupen.com/english/advisories/2010/3075 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=576508 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807 oval.cisecurity.org