12 matches found
EUVD-2024-53441
Malicious code in bioql PyPI...
SUSE CVE-2010-1168
The Safe aka Safe.pm module before 2.25 for Perl allows context-dependent attackers to bypass intended 1 Safe::reval and 2 Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the a...
SUSE CVE-2010-1447
The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...
vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode
A flaw was found in vim in the restricted mode, where all commands that make use of external shells are disabled. However, it was found that users could still execute some arbitrary OS commands in the restricted mode. This flaw was fixed by filtering the functions that can call OS commands...
GLSA-201111-09 : Perl Safe module: Arbitrary Perl code injection
The remote host is affected by the vulnerability described in GLSA-201111-09 Perl Safe module: Arbitrary Perl code injection Unsafe code evaluation prevents the Safe module from properly restricting the code of implicitly called methods on implicitly blessed objects. Impact : A remote attacker...
Fedora 12 : perl-5.10.0-91.fc12 (2010-11340)
Wed Jul 21 2010 Marcela Maslaova - 4:5.10.0-91 - CVE-2010-1168 perl Safe: Intended restriction bypass via object references - CVE-2010-1447 perl: Safe restriction bypass when reference to subroutine in compartment is called from outside - 576824 RT73814 - unpack didn't handle scalar context...
DEBIAN-CVE-2010-1168
The Safe aka Safe.pm module before 2.25 for Perl allows context-dependent attackers to bypass intended 1 Safe::reval and 2 Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the a...
Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities
The Perl Safe module is prone to multiple restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary Perl code outside of the restricted root. Versions prior to Safe 2.25 are vulnerable. OpenVAS Vulnerability Test $Id: gbperlsafe40302.nasl 5323 2017-02-17...
perl: Safe restriction bypass when reference to subroutine in compartment is called from outside
The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...
Safe: Intended restriction bypass via object references
The Safe aka Safe.pm module before 2.25 for Perl allows context-dependent attackers to bypass intended 1 Safe::reval and 2 Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the a...
perl: Safe restriction bypass when reference to subroutine in compartment is called from outside
The Safe aka Safe.pm module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended 1...
CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in 1 Safe::reval or 2 Safe::rdo using a redefined @ variable, which is not reset between successive calls...