Lucene search
RedhatCVE-2012-2085HistoryAug 28, 2012 - 5:55 p.m.
CVE-2012-2085
2012-08-2817:55:04
CWE-94
redhat
web.nvd.nist.gov
48
cve-2012-2085
gajim
exec_command function
vulnerability
remote code execution
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.017
Percentile
88.2%
The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.
Affected configurations
Node
gajimgajimRange≤0.14.4
ORgajimgajimMatch0.1
ORgajimgajimMatch0.10
ORgajimgajimMatch0.10.1
ORgajimgajimMatch0.11
ORgajimgajimMatch0.11.1
ORgajimgajimMatch0.11.2
ORgajimgajimMatch0.11.3
ORgajimgajimMatch0.11.4
ORgajimgajimMatch0.12
ORgajimgajimMatch0.12.1
ORgajimgajimMatch0.12.2
ORgajimgajimMatch0.12.3
ORgajimgajimMatch0.12.4
ORgajimgajimMatch0.12.5
ORgajimgajimMatch0.12.5alpha1
ORgajimgajimMatch0.12.5beta1
ORgajimgajimMatch0.13
ORgajimgajimMatch0.13.1
ORgajimgajimMatch0.13.2
ORgajimgajimMatch0.13.3
ORgajimgajimMatch0.13.4
ORgajimgajimMatch0.14
ORgajimgajimMatch0.14.1
ORgajimgajimMatch0.14.2
ORgajimgajimMatch0.14.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gajim | gajim | * | cpe:2.3:a:gajim:gajim:*:*:*:*:*:*:*:* |
| gajim | gajim | 0.1 | cpe:2.3:a:gajim:gajim:0.1:*:*:*:*:*:*:* |
| gajim | gajim | 0.10 | cpe:2.3:a:gajim:gajim:0.10:*:*:*:*:*:*:* |
| gajim | gajim | 0.10.1 | cpe:2.3:a:gajim:gajim:0.10.1:*:*:*:*:*:*:* |
| gajim | gajim | 0.11 | cpe:2.3:a:gajim:gajim:0.11:*:*:*:*:*:*:* |
| gajim | gajim | 0.11.1 | cpe:2.3:a:gajim:gajim:0.11.1:*:*:*:*:*:*:* |
| gajim | gajim | 0.11.2 | cpe:2.3:a:gajim:gajim:0.11.2:*:*:*:*:*:*:* |
| gajim | gajim | 0.11.3 | cpe:2.3:a:gajim:gajim:0.11.3:*:*:*:*:*:*:* |
| gajim | gajim | 0.11.4 | cpe:2.3:a:gajim:gajim:0.11.4:*:*:*:*:*:*:* |
| gajim | gajim | 0.12 | cpe:2.3:a:gajim:gajim:0.12:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2012-2085
2012-08-28 00:00:00
cvelist
cvelist
CVE-2012-2085
2012-08-28 16:00:00
debiancve
debiancve
CVE-2012-2085
2012-08-28 17:55:04
prion
prion
Design/Logic Flaw
2012-08-28 17:55:00
nvd
nvd
CVE-2012-2085
2012-08-28 17:55:04
openvas
openvas
Gentoo Security Advisory GLSA 201208-04 (gajim)
2012-08-30 00:00:00
Debian Security Advisory DSA 2453-2 (gajim)
2012-04-30 00:00:00
Gentoo Security Advisory GLSA 201208-04 (gajim)
2012-08-30 00:00:00
debian
debian
[SECURITY] [DSA 2453-2] gajim regression
2012-04-19 00:35:37
[SECURITY] [DSA 2453-1] gajim security update
2012-04-16 05:23:39
gentoo
gentoo
Gajim: Multiple vulnerabilities
2012-08-14 00:00:00
nessus
nessus
GLSA-201208-04 : Gajim: Multiple vulnerabilities
2012-08-15 00:00:00
Debian DSA-2453-1 : gajim - several vulnerabilities
2012-04-17 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2453-1] gajim security update
2012-04-19 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.017
Percentile
88.2%
Related for CVE-2012-2085