Unscored severity · published Dec 11, 2002
CVE-2002-1323
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
2.1; 2.1; 2.1; 2.1; 2.1; 2.1 · source: NVD
IR
Irix · Sgi
6.5; 6.5.1; 6.5.2; 6.5.3; 6.5.4; 6.5.5; +25 more · source: NVD
LI
Linux · Sun
5.0.7 · source: NVD
LA
Linux Advanced Workstation · Redhat
2.1 · source: NVD
OU
Open Unix · Sco
8.0 · source: NVD
SA
Safe.pm · Safe.pm
2.0_6; 2.0_7 · source: NVD
SO
Solaris · Sun
8.0; 9.0; 9.0 · source: NVD
SU
Sunos · Sun
5.8 · source: NVD
UN
Unixware · Sco
7.1.2; 7.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1323
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html
bugs6.perl.org
http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744
marc.info
http://marc.info/?l=bugtraq&m=104005919814869&w=2
More from Enterprise Linux
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.0
CVE-2021-40438
mod_proxy SSRF