Lucene search

K
osvGoogleOSV:DSA-2598-1
HistoryJan 05, 2013 - 12:00 a.m.

weechat - several

2013-01-0500:00:00
Google
osv.dev
4

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

85.9%

Two security issues have been discovered in WeeChat, a fast, light and
extensible chat client:

  • CVE-2011-1428
    X.509 certificates were incorrectly validated.
  • CVE-2012-5534
    The hook_process function in the plugin API allowed the execution
    of arbitrary shell commands.

For the stable distribution (squeeze), these problems have been fixed in
version 0.3.2-1+squeeze1.

For the testing distribution (wheezy), these problems have been fixed in
version 0.3.8-1+deb7u1.

For the unstable distribution (sid), these problems have been fixed in
version 0.3.9.2-1.

We recommend that you upgrade your weechat packages.

CPENameOperatorVersion
weechateq0.3.2-1

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

85.9%