high
7.5
CWE
264
Advisory Published
CVE Published
CVE Published
Updated

CVE-2010-1168

First published: Wed Mar 24 2010(Updated: )

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
redhat/perl<3:5.8.5-53.el4
3:5.8.5-53.el4
redhat/perl<4:5.8.8-32.el5_5.1
4:5.8.8-32.el5_5.1
Safe=2.08
Safe=2.09
Safe=2.11
Safe=2.13
Safe=2.14
Safe=2.15
Safe=2.16
Safe=2.17
Safe=2.18
Safe=2.19
Safe=2.20
Safe=2.21
Safe=2.22
Safe=2.23
Safe=2.24
Perl 5.30.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What are the potential risks associated with CVE-2010-1168?

    CVE-2010-1168 allows attackers to bypass access restrictions in the Safe module for Perl, potentially leading to the injection and execution of arbitrary code.

  • How can I remediate CVE-2010-1168?

    To fix CVE-2010-1168, you should upgrade to Safe module version 2.25 or later.

  • Which versions of the Safe module are affected by CVE-2010-1168?

    CVE-2010-1168 affects Safe module versions before 2.25, including 2.08 through 2.24.

  • What Perl versions are vulnerable to CVE-2010-1168?

    Perl versions 5.8.5-53.el4 and 5.8.8-32.el5_5.1 are among those that can have the vulnerability due to the affected Safe module.

  • What is the main attack vector for CVE-2010-1168?

    The main attack vector for CVE-2010-1168 involves calling methods and using objects in a way that circumvents Safe module restrictions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203