NVD

Id
46658  
Name
CVE-2012-5534  
Description
The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to "shell expansion."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-12-03  
Modified Date
2014-02-06  
Seq
2012-5534  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233735 46658 CVE-2012-5534 http://git.savannah.gnu.org/gitweb/?p=weechat.git;a=commitdiff_plain;h=efb795c74fe954b9544074aafcebb1be4452b03a  View
233736 46658 CVE-2012-5534 FEDORA-2012-18494  View
233737 46658 CVE-2012-5534 FEDORA-2012-18526  View
233738 46658 CVE-2012-5534 FEDORA-2012-18575  View
233739 46658 CVE-2012-5534 openSUSE-SU-2013:0150  View
233740 46658 CVE-2012-5534 openSUSE-SU-2012:1580  View
233741 46658 CVE-2012-5534 http://weechat.org/security/  View
233742 46658 CVE-2012-5534 MDVSA-2013:136  View
233743 46658 CVE-2012-5534 [oss-security] 20121119 Re: Fwd: [[Weechat-security] Security vulnerability in WeeChat 0.3.0 -> 0.3.9.1]  View
233744 46658 CVE-2012-5534 56584  View
233745 46658 CVE-2012-5534 https://savannah.nongnu.org/bugs/?37764  View
233746 46658 CVE-2012-5534 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0347  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29917 JVNDB-2012-005624 WeeChat 用 プラグイン API における任意のコマンドを実行される脆弱性 WeeChat 用 プラグイン API の hook_process 関数には、シェル拡張に関する処理に不備があるため、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-5534 58772 CVE-2012-5534 46658 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005624.html 2012-11-18 2012-12-05 View