CVE-2010-1168

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."

• CWE-264

• http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html
• http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in
• http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
• http://secunia.com/advisories/40049Vendor Advisory
• http://secunia.com/advisories/40052Vendor Advisory
• http://secunia.com/advisories/42402
• http://securitytracker.com/id?1024062Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
• http://www.openwall.com/lists/oss-security/2010/05/20/5
• http://www.redhat.com/support/errata/RHSA-2010-0457.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0458.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3075
• https://bugzilla.redhat.com/show_bug.cgi?id=576508
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807
• http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html
• http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in
• http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
• http://secunia.com/advisories/40049Vendor Advisory
• http://secunia.com/advisories/40052Vendor Advisory
• http://secunia.com/advisories/42402
• http://securitytracker.com/id?1024062Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
• http://www.openwall.com/lists/oss-security/2010/05/20/5
• http://www.redhat.com/support/errata/RHSA-2010-0457.htmlVendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0458.htmlVendor Advisory
• http://www.vupen.com/english/advisories/2010/3075
• https://bugzilla.redhat.com/show_bug.cgi?id=576508
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807

Published

Jun 21, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1162The release_one_tty function in drivers/char/tty_io.c in the…
• CVE-2010-1163The command matching functionality in sudo 1.6.8 through 1.7…
• CVE-2010-1164Multiple cross-site scripting (XSS) vulnerabilities in Atlas…
• CVE-2010-1165Atlassian JIRA 3.12 through 4.1 allows remote authenticated …
• CVE-2010-1166The fbComposite function in fbpict.c in the Render extension…
• CVE-2010-1167fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, …
• CVE-2010-1169PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before …
• CVE-2010-1170The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8…
• CVE-2010-1171Red Hat Network (RHN) Satellite 5.3 and 5.4 exposes a danger…
• CVE-2010-1172DBus-GLib 0.73 disregards the access flag of exported GObjec…
• CVE-2010-1173The sctp_process_unk_param function in net/sctp/sm_make_chun…
• CVE-2010-1174Cisco TFTP Server 1.1 allows remote attackers to cause a den…