NVD

Id
12701  
Name
CVE-2010-1168  
Description
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-21  
Modified Date
2016-12-07  
Seq
2010-1168  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69802 12701 CVE-2010-1168 http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html  View
69803 12701 CVE-2010-1168 http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in  View
69804 12701 CVE-2010-1168 http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes  View
69805 12701 CVE-2010-1168 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
69806 12701 CVE-2010-1168 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
69807 12701 CVE-2010-1168 oval:org.mitre.oval:def:7424  View
69808 12701 CVE-2010-1168 oval:org.mitre.oval:def:9807  View
69809 12701 CVE-2010-1168 1024062  View
69810 12701 CVE-2010-1168 MDVSA-2010:115  View
69811 12701 CVE-2010-1168 MDVSA-2010:116  View
69812 12701 CVE-2010-1168 [oss-security] 20100520 CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request  View
69813 12701 CVE-2010-1168 RHSA-2010:0457  View
69814 12701 CVE-2010-1168 RHSA-2010:0458  View
69815 12701 CVE-2010-1168 ADV-2010-3075  View
69816 12701 CVE-2010-1168 https://bugzilla.redhat.com/show_bug.cgi?id=576508  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36234 JVNDB-2010-002014 Perl の Safe モジュールにおける任意のコードを挿入または実行される脆弱性 Perl の Safe モジュールには、Safe::reval および Safe::rdo access の制限を回避してしまう不備があるため、任意のコードを挿入または実行される脆弱性が存在します。 CVE-2010-1168 43748 CVE-2010-1168 12701 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002014.html 2010-06-07 2011-05-09 View