CVE-2012-1095

The CVE-2012-1095 entry concerns osc before version 0.134, where an attacker-controlled build log or build status containing terminal escape sequences could allow remote command execution on OBS repository servers or by package maintainers. Connected sources confirm affected software: osc, with r...

CVE-2012-1095

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted 1 build log or 2 build status that contains an escape sequence for a terminal emulator...