CWE Code: 264
Vulnerability Type: sql_injection
CVSS Score: 8.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the safe (aka safe.pm) module 2.26, and certain earlier versions, for perl, as used in postgresql 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 beta before 9.0 beta 2, allows context-dependent attackers to bypass intended (1) safe::reval and (2) safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-05-19
Last Modified Date: 2017-09-19