CVE-2002-1323

Published: Dec 11, 2002Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

Affected (48)

Products: Safe.pm: Safe.pm · Sgi: Irix · Sun: Linux, Solaris, Sunos · +2 more

Show all products

Safe.pm: Safe.pm · Sgi: Irix · Sun: Linux, Solaris, Sunos · Redhat: Enterprise Linux, Linux Advanced Workstation · Sco: Open Unix, Unixware

1 product

1 product

3 products

2 products

Enterprise Linux

Linux Advanced Workstation

2 products

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Safe.pm Safe.pm	Version 2.0_6
Safe.pm Safe.pm	Version 2.0_7
Sgi Irix	Version 6.5.10
Sgi Irix	Version 6.5.11
Sgi Irix	Version 6.5.12
Sgi Irix	Version 6.5.13
Sgi Irix	Version 6.5.14
Sgi Irix	Version 6.5.15
Sgi Irix	Version 6.5.16
Sgi Irix	Version 6.5.17
Sgi Irix	Version 6.5.17f
Sgi Irix	Version 6.5.17m
Sgi Irix	Version 6.5.18
Sgi Irix	Version 6.5.18f
Sgi Irix	Version 6.5.18m
Sgi Irix	Version 6.5.19
Sgi Irix	Version 6.5.19f
Sgi Irix	Version 6.5.19m
Sgi Irix	Version 6.5.1
Sgi Irix	Version 6.5.20f
Sgi Irix	Version 6.5.20m
Sgi Irix	Version 6.5.21f
Sgi Irix	Version 6.5.21m
Sgi Irix	Version 6.5.22
Sgi Irix	Version 6.5.2
Sgi Irix	Version 6.5.3
Sgi Irix	Version 6.5.4
Sgi Irix	Version 6.5.5
Sgi Irix	Version 6.5.6
Sgi Irix	Version 6.5.7
Sgi Irix	Version 6.5.8
Sgi Irix	Version 6.5.9
Sgi Irix	Version 6.5
Sun Linux	Version 5.0.7

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Linux Advanced Workstation	Version 2.1
Sco Open Unix	Version 8.0
Sco Unixware	Version 7.1.2
Sco Unixware	Version 7.1.3
Sun Solaris	Version 8.0
Sun Solaris	Version 9.0
Sun Solaris	Version 9.0
Sun Sunos	Version 5.8

References (34)

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt (unsafe URL)

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt (unsafe URL)

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A (unsafe URL)

Source: cve@mitre.org

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html

Source: cve@mitre.org

http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104005919814869&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104033126305252&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=104040175522502&w=2

Source: cve@mitre.org

http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5

Source: cve@mitre.org

Patch

http://www.debian.org/security/2002/dsa-208

Source: cve@mitre.org

PatchVendor Advisory

http://www.iss.net/security_center/static/10574.php

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/2183

Source: cve@mitre.org

http://www.osvdb.org/3814

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-256.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2003-257.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/6111

Source: cve@mitre.org

PatchVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160

Source: cve@mitre.org

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A (unsafe URL)

Source: af854a3a-2127-422b-91ae-364da2661108

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104005919814869&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104033126305252&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=104040175522502&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2002/dsa-208

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.iss.net/security_center/static/10574.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/2183

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/3814

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-256.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2003-257.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6111

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.