NetSight
IP …
medium4.6

CVE-2002-1323

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using…

Impact

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

Affected products

VendorProductAffected versions
Safe.PmSafe.Pm
Versions 2.0_6, 2.0_7
SunLinux
Version 5.0.7
SgiIrix
Versions 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5
RedhatEnterprise Linux
Version 2.1
RedhatLinux Advanced Workstation
Version 2.1
ScoOpen Unix
Version 8.0
ScoUnixware
Versions 7.1.2, 7.1.3
SunSolaris
Versions 8.0, 9.0
SunSunos
Version 5.8

References