Home > Vulnerability Database > CVE-2010-1168

Mend.io Vulnerability Database

CVE-2010-1168

Date: June 21, 2010

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."

Severity Score

7.3

Related Resources (22)

Url: http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:115

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2010:116

Url: http://securitytracker.com/id?1024062

Url: http://www.redhat.com/support/errata/RHSA-2010-0457.html

Url: http://secunia.com/advisories/40052

Url: http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in

Url: https://access.redhat.com/security/cve/CVE-2010-1168

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-1168

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807

Url: http://www.vupen.com/english/advisories/2010/3075

Url: http://www.redhat.com/support/errata/RHSA-2010-0458.html

Url: http://secunia.com/advisories/42402

Url: http://secunia.com/advisories/40049

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-1168

Url: http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html

Url: http://www.openwall.com/lists/oss-security/2010/05/20/5

Url: https://bugzilla.redhat.com/show_bug.cgi?id=576508

Url: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Url: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735

Url: https://www.mend.io/vulnerability-database/CVE-2010-1168

Severity Score

7.3

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	7.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-1168

Date: June 21, 2010

Severity Score

Related Resources (22)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?