NVD

Id
47113  
Name
CVE-2012-6329  
Description
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-04  
Modified Date
2016-12-07  
Seq
2012-6329  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235889 47113 CVE-2012-6329 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224  View
235890 47113 CVE-2012-6329 [perl5-porters] 20121205 security notice: Locale::Maketext  View
235891 47113 CVE-2012-6329 [perl5-porters] 20121205 Re: security notice: Locale::Maketext  View
235892 47113 CVE-2012-6329 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
235893 47113 CVE-2012-6329 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735  View
235894 47113 CVE-2012-6329 [oss-security] 20121211 Re: CVE request: perl-modules  View
235895 47113 CVE-2012-6329 http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod  View
235896 47113 CVE-2012-6329 http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8  View
235897 47113 CVE-2012-6329 RHSA-2013:0685  View
235898 47113 CVE-2012-6329 [foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution  View
235899 47113 CVE-2012-6329 http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329  View
235900 47113 CVE-2012-6329 MDVSA-2013:113  View
235901 47113 CVE-2012-6329 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
235902 47113 CVE-2012-6329 56950  View
235903 47113 CVE-2012-6329 USN-2099-1  View
235904 47113 CVE-2012-6329 https://bugzilla.redhat.com/show_bug.cgi?id=884354  View
235905 47113 CVE-2012-6329 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19435 JVNDB-2013-001009 Perl の Locale::Maketext の実装における任意のコマンドを実行される脆弱性 Perl の Locale::Maketext の実装の Maketext.pm 内の _compile 関数は、角括弧表記のコンパイルの際に、バックスラッシュおよび完全修飾メソッド名を適切に処理しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-6329 59567 CVE-2012-6329 47113 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001009.html 2013-01-04 2016-02-16 View