CVE-2010-1447

The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.

• CWE-264

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://osvdb.org/64756
• http://secunia.com/advisories/39845Vendor Advisory
• http://secunia.com/advisories/40049
• http://secunia.com/advisories/40052
• http://security-tracker.debian.org/tracker/CVE-2010-1447
• http://www.debian.org/security/2011/dsa-2267
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
• http://www.openwall.com/lists/oss-security/2010/05/20/5
• http://www.postgresql.org/about/news.1203
• http://www.redhat.com/support/errata/RHSA-2010-0457.html
• http://www.redhat.com/support/errata/RHSA-2010-0458.html
• http://www.securityfocus.com/bid/40305
• http://www.securitytracker.com/id?1023988
• http://www.vupen.com/english/advisories/2010/1167Patch, Vendor Advisory
• https://bugs.launchpad.net/bugs/cve/2010-1447
• https://bugzilla.redhat.com/show_bug.cgi?id=588269
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
• http://osvdb.org/64756
• http://secunia.com/advisories/39845Vendor Advisory
• http://secunia.com/advisories/40049
• http://secunia.com/advisories/40052
• http://security-tracker.debian.org/tracker/CVE-2010-1447
• http://www.debian.org/security/2011/dsa-2267
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:115
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
• http://www.openwall.com/lists/oss-security/2010/05/20/5
• http://www.postgresql.org/about/news.1203
• http://www.redhat.com/support/errata/RHSA-2010-0457.html
• http://www.redhat.com/support/errata/RHSA-2010-0458.html
• http://www.securityfocus.com/bid/40305
• http://www.securitytracker.com/id?1023988
• http://www.vupen.com/english/advisories/2010/1167Patch, Vendor Advisory
• https://bugs.launchpad.net/bugs/cve/2010-1447
• https://bugzilla.redhat.com/show_bug.cgi?id=588269
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11530
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7320

Published

May 19, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1441Multiple heap-based buffer overflows in VideoLAN VLC media p…
• CVE-2010-1442VideoLAN VLC media player before 1.0.6 allows remote attacke…
• CVE-2010-1443The parse_track_node function in modules/demux/playlist/xspf…
• CVE-2010-1444The ZIP archive decompressor in VideoLAN VLC media player be…
• CVE-2010-1445Heap-based buffer overflow in VideoLAN VLC media player befo…
• CVE-2010-1446arch/powerpc/mm/fsl_booke_mmu.c in KGDB in the Linux kernel …
• CVE-2010-1448Cross-site scripting (XSS) vulnerability in lib/LXR/Common.p…
• CVE-2010-1449Integer overflow in rgbimgmodule.c in the rgbimg module in P…
• CVE-2010-1450Multiple buffer overflows in the RLE decoder in the rgbimg m…
• CVE-2010-1451The TSB I-TLB load implementation in arch/sparc/kernel/tsb.S…
• CVE-2010-1452The (1) mod_cache and (2) mod_dav modules in the Apache HTTP…
• CVE-2010-1453Cross-site scripting (XSS) vulnerability in the Login form i…