CVE-2002-1323

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out...

4.6 MediumFix available

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

Exploit likelihood

0.46%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Record: CVE-2002-1323
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2002-1323
Updated: 2026-11-02

EUVDEUVD-2002-1307 No score

Record: EUVD-2002-1307
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qmvp-2m2m-rm8h No score

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out...

Record: GHSA-qmvp-2m2m-rm8h
Updated: 2026-11-02

OSV No score

Record: CVE-2002-1323
Updated: 2026-11-02

OSVDEBIAN-CVE-2002-1323 No score

Record: DEBIAN-CVE-2002-1323
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`perl` Debian:12	before 5.8.0-14	5.8.0-14
`perl` Debian:13	before 5.8.0-14	5.8.0-14
`perl` Debian:14	before 5.8.0-14	5.8.0-14
`perl` Debian:3.0	before 5.6.1-8.2	5.6.1-8.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1323 is a medium vulnerability (CVSS 4.6) in Safe.pm, published December 11, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in perl 5.8.0-14.

References

Show 11 moreShow less