The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
bug in add_range() wasn't entering the end ip correctly.
added list_range() function. Probably not very useful since it doesn't output ranges in CIDR netblock sizes. Could be changed if desired, let me know either way.