Lucene search
HistoryAug 07, 2005 - 4:00 a.m.
CVE-2005-2483
cve-2005-2483
eval injection
karrigell
remote attack
arbitrary code execution
python
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.12 Low
EPSS
Percentile
95.4%
Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script.
Affected configurations
Node
karrigellkarrigellMatch2.0
ORkarrigellkarrigellMatch2.0.1
ORkarrigellkarrigellMatch2.0.2
ORkarrigellkarrigellMatch2.0.3
ORkarrigellkarrigellMatch2.0.4
ORkarrigellkarrigellMatch2.0.5
ORkarrigellkarrigellMatch2.0_beta
ORkarrigellkarrigellMatch2.1
ORkarrigellkarrigellMatch2.1.1
ORkarrigellkarrigellMatch2.1.2
ORkarrigellkarrigellMatch2.1.3
ORkarrigellkarrigellMatch2.1.4
ORkarrigellkarrigellMatch2.1.5
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.1 High
AI Score
Confidence
Low
0.12 Low
EPSS
Percentile
95.4%
Related for CVE-2005-2483