CVE-2002-1323 | Vulnetix

CVE-2002-1323 PUBLISHED CVSS 4.599999904632568 MEDIUM

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

EPSS 0.46% · 39.8th percentile

Risk Scores

CVSS 2.0

4.599999904632568

EPSS Score

0.46%

39.8th percentile

Affected Products

Vendor	Product	Versions
sgi	irix	6.5.5, ,
safe.pm	safe.pm	2.0_6, 2.0_7
sco	open_unix	8.0
redhat	enterprise_linux	2.1, 2.1, 2.1
n/a	n/a	n/a
sco	unixware	7.1.3, 7.1.2
sun	sunos	5.8
sun	solaris	9.0, 8.0, 9.0
sun	linux	5.0.7
redhat	linux_advanced_workstation	2.1

Timeline

Dec 11, 2002 CVE Published
Feb 4, 2022 EPSS Score
Mar 30, 2022 EPSS Score
May 22, 2022 EPSS Score
Jul 16, 2022 EPSS Score
Sep 7, 2022 EPSS Score
Oct 31, 2022 EPSS Score
Dec 23, 2022 EPSS Score
Feb 15, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 9, 2023 EPSS Score
Jun 2, 2023 EPSS Score

References

20021219 TSLSA-2002-0087 - perl mailing-list
20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl) mailing-list
CSSA-2004-007.0 vendor-advisory
3814 vdb
20021220 GLSA: perl mailing-list
SCOSA-2004.1 vendor-advisory
2183 vdb
https://nvd.nist.gov/vuln/detail/CVE-2002-1323 advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160 url
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html url
http://www.iss.net/security_center/static/10574.php url
ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A technical
http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744 technical
http://www.debian.org/security/2002/dsa-208 patch
http://www.securityfocus.com/bid/6111 patch
http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5 patch
http://www.redhat.com/support/errata/RHSA-2003-256.html technical
http://www.redhat.com/support/errata/RHSA-2003-257.html technical

Open in Interactive Console →