Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2012-6329
HistoryJan 04, 2013 - 9:55 p.m.

Design/Logic Flaw

2013-01-0421:55:00
PRIOn knowledge base
www.prio-n.com
2

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.592 Medium

EPSS

Percentile

97.7%

JSON

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.

References

Related

checkpoint_advisories 1
nessus 22
fedora 5
openvas 33
cve 1
debiancve 1
securityvulns 6
gentoo 1
packetstorm 3
metasploit 1
ubuntucve 2
aix 1
dsquare 1
seebug 1
ubuntu 1
exploitdb 1
zdt 2
suse 4
f5 2
centos 1
veracode 3
oraclelinux 1
redhat 2
amazon 1
checkpoint_advisories
checkpoint_advisories
TWiki MAKETEXT Remote Command Execution (CVE-2012-6329)
2013-06-09 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 : perl vulnerability (USN-2099-1)
2014-02-06 00:00:00
Fedora 17 : perl-5.14.3-221.fc17 (2013-1836)
2013-02-19 00:00:00
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_6329_code_injection1)
2015-01-19 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: perl-5.14.3-221.fc17
2013-02-19 01:37:56
[SECURITY] Fedora 18 Update: perl-5.16.2-237.fc18
2013-01-30 00:54:03
[SECURITY] Fedora 18 Update: perl-5.16.2-240.fc18
2013-03-22 00:48:54
openvas
openvas
Active Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities (Windows)
2013-01-24 00:00:00
Ubuntu Update for perl USN-2099-1
2014-02-11 00:00:00
Strawberry Perl Locale::Maketext Module Multiple Code Injection Vulnerabilities - Windows
2013-01-24 00:00:00
cve
cve
CVE-2012-6329
2013-01-04 21:55:00
debiancve
debiancve
CVE-2012-6329
2013-01-04 21:55:00
securityvulns
securityvulns
[USN-2099-1] Perl vulnerability
2014-02-10 00:00:00
perl Locale::Maketext code execution
2014-02-10 00:00:00
Foswiki Security Alert CVE-2012-6329, CVE-2012-6330 Remote code execution and other vulnerabilities in MAKETEXT macro
2012-12-18 00:00:00
gentoo
gentoo
Perl, Perl Locale-Maketext module: Multiple vulnerabilities
2014-10-12 00:00:00
packetstorm
packetstorm
TWiki MAKETEXT Remote Command Execution
2012-12-24 00:00:00
TWiki 5.1.2 Command Execution
2012-12-15 00:00:00
Foswiki MAKETEXT Remote Command Execution
2012-12-24 00:00:00
metasploit
metasploit
TWiki MAKETEXT Remote Command Execution
2012-12-21 10:30:04
ubuntucve
ubuntucve
CVE-2012-6329
2013-01-04 00:00:00
CVE-2013-1666
2019-11-01 00:00:00
aix
aix
Security Vulnerability in Perl _compile
2014-04-23 17:08:11
dsquare
dsquare
TWiki 5.1.2 RCE
2013-01-13 00:00:00
seebug
seebug
TWiki MAKETEXT Remote Command Execution
2012-12-25 00:00:00
ubuntu
ubuntu
Perl vulnerability
2014-02-05 00:00:00
exploitdb
exploitdb
TWiki MAKETEXT - Remote Command Execution (Metasploit)
2012-12-23 00:00:00
zdt
zdt
Foswiki MAKETEXT 1.1.7 / 1.0.10 Code Execution Vulnerability
2013-02-20 00:00:00
Foswiki 1.0.10 / 1.1.6 Code Injection / Denial Of Service
2012-12-18 00:00:00
suse
suse
update for perl (important)
2013-03-20 11:05:11
update for perl (important)
2013-03-20 14:04:22
Security update for Perl (important)
2013-03-13 00:05:41
f5
f5
K15867 : Perl vulnerabilities CVE-2012-5195, CVE-2012-5526, CVE-2012-6329, and CVE-2013-1667
2015-09-15 00:00:00
SOL15867 - Perl vulnerabilities CVE-2012-5195, CVE-2012-5526, CVE-2012-6329, and CVE-2013-1667
2014-11-25 00:00:00
centos
centos
perl security update
2013-03-26 21:05:02
veracode
veracode
Privilege Escalation
2019-05-02 04:54:30
HTTP Header Injection
2019-05-02 04:54:30
Memory Corruption
2019-05-02 04:54:30
oraclelinux
oraclelinux
perl security update
2013-03-26 00:00:00
redhat
redhat
(RHSA-2013:0685) Moderate: perl security update
2013-03-26 00:00:00
(RHSA-2013:0746) Important: rhev-hypervisor6 security and bug fix update
2013-04-23 00:00:00
amazon
amazon
Medium: perl
2013-04-04 11:10:00

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.592 Medium

EPSS

Percentile

97.7%

JSON
Related for PRION:CVE-2012-6329
checkpoint_advisories1nessus22fedora5openvas33cve1debiancve1securityvulns6gentoo1packetstorm3metasploit1ubuntucve2aix1dsquare1seebug1ubuntu1exploitdb1zdt2suse4f52centos1veracode3oraclelinux1redhat2amazon1