CVE-2002-1323
- State
- Published
- Severity
- Not scored
- Published
- Sep 1, 2004
- Updated
- Aug 8, 2024
- Reserved
- Nov 26, 2002
Description
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2003:256vendor-advisory
- 20021220 GLSA: perlmailing-list
- http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5
- RHSA-2003:257vendor-advisory
- 20021219 TSLSA-2002-0087 - perlmailing-list
- 20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl)mailing-list
- safe-pm-bypass-restrictions(10574)vdb-entry
- 3814vdb-entry
- oval:org.mitre.oval:def:1160vdb-entrysignature
- 2183vdb-entry
- DSA-208vendor-advisory
- 6111vdb-entry
- 20021105 Perl Safe.pm compartment reuse vulnmailing-list
- http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.