Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2010-1168
HistoryJun 21, 2010 - 4:30 p.m.

CVE-2010-1168

2010-06-2116:30:01
CWE-264
redhat
web.nvd.nist.gov
48
cve-2010-1168
safe module
perl
access restrictions
code injection
arbitrary code
automagic methods
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.019

Percentile

88.7%

JSON

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to “automagic methods.”

Affected configurations

Nvd
Node
rafael_garcia-suarezsafeMatch2.08
OR
rafael_garcia-suarezsafeMatch2.09
OR
rafael_garcia-suarezsafeMatch2.11
OR
rafael_garcia-suarezsafeMatch2.13
OR
rafael_garcia-suarezsafeMatch2.14
OR
rafael_garcia-suarezsafeMatch2.15
OR
rafael_garcia-suarezsafeMatch2.16
OR
rafael_garcia-suarezsafeMatch2.17
OR
rafael_garcia-suarezsafeMatch2.18
OR
rafael_garcia-suarezsafeMatch2.19
OR
rafael_garcia-suarezsafeMatch2.20
OR
rafael_garcia-suarezsafeMatch2.21
OR
rafael_garcia-suarezsafeMatch2.22
OR
rafael_garcia-suarezsafeMatch2.23
OR
rafael_garcia-suarezsafeMatch2.24
AND
perlperl
VendorProductVersionCPE
rafael_garcia-suarezsafe2.08cpe:2.3:a:rafael_garcia-suarez:safe:2.08:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.09cpe:2.3:a:rafael_garcia-suarez:safe:2.09:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.11cpe:2.3:a:rafael_garcia-suarez:safe:2.11:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.13cpe:2.3:a:rafael_garcia-suarez:safe:2.13:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.14cpe:2.3:a:rafael_garcia-suarez:safe:2.14:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.15cpe:2.3:a:rafael_garcia-suarez:safe:2.15:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.16cpe:2.3:a:rafael_garcia-suarez:safe:2.16:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.17cpe:2.3:a:rafael_garcia-suarez:safe:2.17:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.18cpe:2.3:a:rafael_garcia-suarez:safe:2.18:*:*:*:*:*:*:*
rafael_garcia-suarezsafe2.19cpe:2.3:a:rafael_garcia-suarez:safe:2.19:*:*:*:*:*:*:*
Rows per page:
1-10 of 161

References

Related

openvas 27
nessus 31
nvd 3
veracode 1
cvelist 2
debiancve 1
gentoo 1
prion 3
oraclelinux 2
cve 2
seebug 2
ubuntucve 3
fedora 3
redhat 2
securityvulns 4
centos 1
debian 2
ubuntu 1
vmware 2
openvas
openvas
Gentoo Security Advisory GLSA 201111-09 (Safe)
2012-02-12 00:00:00
Gentoo Security Advisory GLSA 201111-09 (Safe)
2012-02-12 00:00:00
Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities
2010-06-14 00:00:00
nessus
nessus
Solaris 10 (x86) : 146773-01
2011-04-01 00:00:00
Solaris 10 (sparc) : 146769-01
2018-03-12 00:00:00
Solaris 10 (x86) : 146773-01
2018-03-12 00:00:00
nvd
nvd
CVE-2010-1168
2010-06-21 16:30:01
CVE-2010-1974
2010-05-19 18:30:03
CVE-2010-3433
2010-10-06 17:00:16
veracode
veracode
Restriction Bypass
2020-04-10 00:49:00
cvelist
cvelist
CVE-2010-1168
2010-06-21 16:00:00
CVE-2010-3433
2010-10-06 16:00:00
debiancve
debiancve
CVE-2010-1168
2010-06-21 16:30:01
gentoo
gentoo
Perl Safe module: Arbitrary Perl code injection
2011-11-20 00:00:00
prion
prion
Code injection
2010-06-21 16:30:00
Design/Logic Flaw
2010-05-19 18:30:00
Code injection
2010-10-06 17:00:00
oraclelinux
oraclelinux
perl security update
2010-06-07 00:00:00
perl security update
2010-06-07 00:00:00
cve
cve
CVE-2010-1974
2010-05-19 18:30:03
CVE-2010-3433
2010-10-06 17:00:16
seebug
seebug
Perl Safe模块对象引用绕过安全限制漏洞
2010-06-09 00:00:00
VMware ESX Service Console多个安全漏洞
2012-01-13 00:00:00
ubuntucve
ubuntucve
CVE-2010-1447
2010-05-19 00:00:00
CVE-2010-1168
2010-06-21 00:00:00
CVE-2010-3433
2010-10-05 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: perl-5.10.1-116.fc13
2010-08-03 01:10:38
[SECURITY] Fedora 12 Update: perl-5.10.0-91.fc12
2010-08-13 21:12:30
[SECURITY] Fedora 13 Update: perl-5.10.1-123.fc13
2011-04-23 20:49:40
redhat
redhat
(RHSA-2010:0457) Moderate: perl security update
2010-06-07 00:00:00
(RHSA-2010:0458) Moderate: perl security update
2010-06-07 00:00:00
securityvulns
securityvulns
[ MDVSA-2010:115 ] perl
2010-06-14 00:00:00
Perl protection bypass
2010-06-14 00:00:00
[USN-1129-1] Perl vulnerabilities
2011-05-05 00:00:00
centos
centos
perl security update
2010-06-12 12:59:15
debian
debian
BSA-005 Security Update for postgresql-8.4
2010-10-10 12:48:45
BSA-005 Security Update for postgresql-8.4
2010-10-10 12:48:58
ubuntu
ubuntu
Perl vulnerabilities
2011-05-03 00:00:00
vmware
vmware
VMware ESX third party updates for Service Console
2010-08-31 00:00:00
VMware ESX third party updates for Service Console
2010-08-31 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.019

Percentile

88.7%

JSON
Related for CVE-2010-1168
openvas27nessus31nvd3veracode1cvelist2debiancve1gentoo1prion3oraclelinux2cve2seebug2ubuntucve3fedora3redhat2securityvulns4centos1debian2ubuntu1vmware2