Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sgi | irix | 6.5.16 |
| sgi | irix | 6.5.19m |
| sgi | irix | 6.5.22 |
| sgi | irix | 6.5.12 |
| sgi | irix | 6.5.11 |
| safe.pm | safe.pm | 2.0_7 |
| sun | linux | 5.0.7 |
| sgi | irix | 6.5 |
| sco | open_unix | 8.0 |
| sgi | irix | 6.5.3 |
| sun | solaris | 8.0 |
| sun | solaris | 9.0 |
| sgi | irix | 6.5.19f |
| sgi | irix | 6.5.5 |
| sgi | irix | 6.5.13 |
| sgi | irix | 6.5.18m |
| redhat | enterprise_linux | 2.1 |
| sgi | irix | 6.5.21f |
| sco | unixware | 7.1.2 |
| sgi | irix | 6.5.2 |
| sgi | irix | 6.5.4 |
| sgi | irix | 6.5.17f |
| sgi | irix | 6.5.18 |
| sgi | irix | 6.5.1 |
| sgi | irix | 6.5.18f |
| safe.pm | safe.pm | 2.0_6 |
| sgi | irix | 6.5.20m |
| sgi | irix | 6.5.8 |
| sgi | irix | 6.5.9 |
| sgi | irix | 6.5.10 |
| sgi | irix | 6.5.6 |
| sgi | irix | 6.5.17m |
| sgi | irix | 6.5.17 |
| sgi | irix | 6.5.19 |
| sgi | irix | 6.5.7 |
| sgi | irix | 6.5.20f |
| sco | unixware | 7.1.3 |
| redhat | linux_advanced_workstation | 2.1 |
| sgi | irix | 6.5.14 |
| sgi | irix | 6.5.21m |
| sun | sunos | 5.8 |
| sgi | irix | 6.5.15 |