CVE-2010-1168
Safe: Intended restriction bypass via object references
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."
El módulo Safe (Safe.pm) en versiones anteriores a la v2.25 de Perl permite a atacantes, dependiendo del contexto, evitar las restricciones de acceso previstas (1) Safe::reval y (2) Safe::rdo, e inyectar y ejecutar código de su elección, a través de vectores de ataque que involucran métodos llamados implícitamente y objetos implícitamente "blessed", como se ha demostrado por los métodos (a) DESTROY y (b) AUTOLOAD. Relacionado con los "automagic methods".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-03-29 CVE Reserved
- 2010-06-12 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html | X_refsource_confirm | |
| http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in | X_refsource_confirm | |
| http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes | X_refsource_confirm | |
| http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 | X_refsource_confirm | |
| http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 | X_refsource_confirm | |
| http://secunia.com/advisories/42402 | Third Party Advisory | |
| http://www.openwall.com/lists/oss-security/2010/05/20/5 | Mailing List |
|
| http://www.vupen.com/english/advisories/2010/3075 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424 | Signature | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/40049 | 2017-09-19 | |
| http://secunia.com/advisories/40052 | 2017-09-19 | |
| http://securitytracker.com/id?1024062 | 2017-09-19 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2010:115 | 2017-09-19 | |
| http://www.mandriva.com/security/advisories?name=MDVSA-2010:116 | 2017-09-19 | |
| http://www.redhat.com/support/errata/RHSA-2010-0457.html | 2017-09-19 | |
| http://www.redhat.com/support/errata/RHSA-2010-0458.html | 2017-09-19 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=576508 | 2010-06-07 | |
| https://access.redhat.com/security/cve/CVE-2010-1168 | 2010-06-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.08 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.08" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.09 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.09" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.11 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.11" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.13 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.13" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.14 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.14" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.15 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.15" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.16 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.16" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.17 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.17" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.18 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.18" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.19 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.19" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.20 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.20" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.21 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.21" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.22 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.22" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.23 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.23" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|
| Rafael Garcia-suarez Search vendor "Rafael Garcia-suarez" | Safe Search vendor "Rafael Garcia-suarez" for product "Safe" | 2.24 Search vendor "Rafael Garcia-suarez" for product "Safe" and version "2.24" | - |
Affected
| in | Perl Search vendor "Perl" | Perl Search vendor "Perl" for product "Perl" | * | - |
Safe
|