CVE-2002-1742

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.

Affected (3)

Products: Paul Kulchenko: Soap Lite

Paul Kulchenko

1 product

Soap Lite

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Paul Kulchenko Soap Lite	Version 0.50
Paul Kulchenko Soap Lite	Version 0.51
Paul Kulchenko Soap Lite	Version 0.52

References (16)

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc (unsafe URL)

Source: cve@mitre.org

Vendor Advisory

http://online.securityfocus.com/archive/1/267051

Source: cve@mitre.org

http://use.perl.org/articles/02/04/09/000212.shtml?tid=5

Source: cve@mitre.org

Patch

http://www.phrack.com/show.php?p=58&a=9

Source: cve@mitre.org

http://www.phrack.org/show.php?p=58&a=9

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/4493

Source: cve@mitre.org

Patch

http://www.soaplite.com/

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/8838

Source: cve@mitre.org

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc (unsafe URL)