CVE-2002-1323 Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not re...
MediumCVSS 4.6
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| safe.pm | = 2.0_6 | No fix listed |
| safe.pm | = 2.0_7 | No fix listed |
| sun linux | = 5.0.7 | No fix listed |
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.14 | No fix listed |
| sgi irix | = 6.5.15 | No fix listed |
| sgi irix | = 6.5.16 | No fix listed |
| sgi irix | = 6.5.17 | No fix listed |
| sgi irix | = 6.5.17f | No fix listed |
| sgi irix | = 6.5.17m | No fix listed |
| sgi irix | = 6.5.18 | No fix listed |
| sgi irix | = 6.5.18f | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sgi irix | = 6.5.18m | No fix listed |
| sgi irix | = 6.5.19 | No fix listed |
| sgi irix | = 6.5.19f | No fix listed |
| sgi irix | = 6.5.19m | No fix listed |
| sgi irix | = 6.5.20f | No fix listed |
| sgi irix | = 6.5.20m | No fix listed |
| sgi irix | = 6.5.21f | No fix listed |
| sgi irix | = 6.5.21m | No fix listed |
| sgi irix | = 6.5.22 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| sco open unix | = 8.0 | No fix listed |
| sco unixware | = 7.1.2 | No fix listed |
| sco unixware | = 7.1.3 | No fix listed |
| sun solaris | = 8.0 | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sunos | = 5.8 | No fix listed |
| debian/perl(Debian:12) | < 5.8.0-14 | 5.8.0-14 |
| debian/perl(Debian:13) | < 5.8.0-14 | 5.8.0-14 |
| debian/perl(Debian:14) | < 5.8.0-14 | 5.8.0-14 |
References
- 20021105 Perl Safe.pm compartment reuse vuln mailing-list
- bugs6.perl.org
- 20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl) mailing-list
- 20021219 TSLSA-2002-0087 - perl mailing-list
- 20021220 GLSA: perl mailing-list
- use.perl.org patch
- DSA-208 patch vendor-advisory
- safe-pm-bypass-restrictions(10574) vdb-entry vendor-advisory
- 2183 vdb-entry
- 3814 vdb-entry
- RHSA-2003:256 vendor-advisory
- RHSA-2003:257 vendor-advisory
- 6111 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:1160 signature vdb-entry
- Debian Security Tracker CVE-2002-1323 vendor-advisory