CVE-2010-1168

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to automagic methods.

Affected Software

Name	Vendor	Start Version	End Version
Safe	Rafael_garcia-suarez	2.08 (including)	2.08 (including)
Safe	Rafael_garcia-suarez	2.09 (including)	2.09 (including)
Safe	Rafael_garcia-suarez	2.11 (including)	2.11 (including)
Safe	Rafael_garcia-suarez	2.13 (including)	2.13 (including)
Safe	Rafael_garcia-suarez	2.14 (including)	2.14 (including)
Safe	Rafael_garcia-suarez	2.15 (including)	2.15 (including)
Safe	Rafael_garcia-suarez	2.16 (including)	2.16 (including)
Safe	Rafael_garcia-suarez	2.17 (including)	2.17 (including)
Safe	Rafael_garcia-suarez	2.18 (including)	2.18 (including)
Safe	Rafael_garcia-suarez	2.19 (including)	2.19 (including)
Safe	Rafael_garcia-suarez	2.20 (including)	2.20 (including)
Safe	Rafael_garcia-suarez	2.21 (including)	2.21 (including)
Safe	Rafael_garcia-suarez	2.22 (including)	2.22 (including)
Safe	Rafael_garcia-suarez	2.23 (including)	2.23 (including)
Safe	Rafael_garcia-suarez	2.24 (including)	2.24 (including)
Red Hat Enterprise Linux 3	RedHat	perl-2:5.8.0-101.EL3	*
Red Hat Enterprise Linux 4	RedHat	perl-3:5.8.5-53.el4	*
Red Hat Enterprise Linux 5	RedHat	perl-4:5.8.8-32.el5_5.1	*
Perl	Ubuntu	dapper	*
Perl	Ubuntu	hardy	*
Perl	Ubuntu	jaunty	*
Perl	Ubuntu	karmic	*
Perl	Ubuntu	lucid	*
Perl	Ubuntu	maverick	*
Perl	Ubuntu	natty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-1168
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References