CVE-2012-6329
50Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 62%
de la publicación al arma0 días
Publicada en NVD4 ene
1ª PoC23 dic
metasploit3 dic
probabilidad de explotación
62%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/23580no verificadoexploitdbwww.exploit-db.com/exploits/23579no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224http://code.activestate.com/lists/perl5-porters/187746/http://code.activestate.com/lists/perl5-porters/187763/http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735http://openwall.com/lists/oss-security/2012/12/11/4http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.podhttp://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8http://rhn.redhat.com/errata/RHSA-2013-0685.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=884354http://sourceforge.net/mailarchive/message.php?msg_id=30219695https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032