CVE-2011-10043

Name of the Vulnerable Software and Affected Versions Module::Load versions prior to 0.22

Description Module::Load for Perl allows the loading of arbitrary modules outside of the @INC array, which is the default list of directories Perl searches for modules. This occurs because module names starting with :: can be passed to the load function to specify arbitrary module paths. An attacker capable of influencing the module names passed to the load function can exploit this behavior to execute arbitrary code.

Recommendations Update Module::Load to version 0.22 or later.