CVE-2012-6329 (GCVE-0-2012-6329)
Vulnerability from cvelistv5
Published
2013-01-04 21:00
Modified
2024-08-06 21:28
Severity ?
CWE
  • n/a
Summary
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
References
cve@mitre.org http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224
cve@mitre.org http://code.activestate.com/lists/perl5-porters/187746/
cve@mitre.org http://code.activestate.com/lists/perl5-porters/187763/
cve@mitre.org http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
cve@mitre.org http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
cve@mitre.org http://openwall.com/lists/oss-security/2012/12/11/4
cve@mitre.org http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod
cve@mitre.org http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8 Patch
cve@mitre.org http://rhn.redhat.com/errata/RHSA-2013-0685.html
cve@mitre.org http://sourceforge.net/mailarchive/message.php?msg_id=30219695
cve@mitre.org http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
cve@mitre.org http://www.mandriva.com/security/advisories?name=MDVSA-2013:113
cve@mitre.org http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
cve@mitre.org http://www.securityfocus.com/bid/56950
cve@mitre.org http://www.ubuntu.com/usn/USN-2099-1
cve@mitre.org https://bugzilla.redhat.com/show_bug.cgi?id=884354
cve@mitre.org https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032
af854a3a-2127-422b-91ae-364da2661108 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224
af854a3a-2127-422b-91ae-364da2661108 http://code.activestate.com/lists/perl5-porters/187746/
af854a3a-2127-422b-91ae-364da2661108 http://code.activestate.com/lists/perl5-porters/187763/
af854a3a-2127-422b-91ae-364da2661108 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
af854a3a-2127-422b-91ae-364da2661108 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
af854a3a-2127-422b-91ae-364da2661108 http://openwall.com/lists/oss-security/2012/12/11/4
af854a3a-2127-422b-91ae-364da2661108 http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod
af854a3a-2127-422b-91ae-364da2661108 http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8 Patch
af854a3a-2127-422b-91ae-364da2661108 http://rhn.redhat.com/errata/RHSA-2013-0685.html
af854a3a-2127-422b-91ae-364da2661108 http://sourceforge.net/mailarchive/message.php?msg_id=30219695
af854a3a-2127-422b-91ae-364da2661108 http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
af854a3a-2127-422b-91ae-364da2661108 http://www.mandriva.com/security/advisories?name=MDVSA-2013:113
af854a3a-2127-422b-91ae-364da2661108 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
af854a3a-2127-422b-91ae-364da2661108 http://www.securityfocus.com/bid/56950
af854a3a-2127-422b-91ae-364da2661108 http://www.ubuntu.com/usn/USN-2099-1
af854a3a-2127-422b-91ae-364da2661108 https://bugzilla.redhat.com/show_bug.cgi?id=884354
af854a3a-2127-422b-91ae-364da2661108 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:28:39.568Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "MDVSA-2013:113",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
          },
          {
            "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
          },
          {
            "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://code.activestate.com/lists/perl5-porters/187763/"
          },
          {
            "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
          },
          {
            "name": "USN-2099-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2099-1"
          },
          {
            "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://code.activestate.com/lists/perl5-porters/187746/"
          },
          {
            "name": "RHSA-2013:0685",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
          },
          {
            "name": "56950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56950"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-06T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "MDVSA-2013:113",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
        },
        {
          "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
        },
        {
          "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://code.activestate.com/lists/perl5-porters/187763/"
        },
        {
          "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
        },
        {
          "name": "USN-2099-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2099-1"
        },
        {
          "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://code.activestate.com/lists/perl5-porters/187746/"
        },
        {
          "name": "RHSA-2013:0685",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
        },
        {
          "name": "56950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56950"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-6329",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "MDVSA-2013:113",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
            },
            {
              "name": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329",
              "refsource": "CONFIRM",
              "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
            },
            {
              "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
              "refsource": "MLIST",
              "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
            },
            {
              "name": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8",
              "refsource": "CONFIRM",
              "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
            },
            {
              "name": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod",
              "refsource": "CONFIRM",
              "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
            },
            {
              "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
              "refsource": "MLIST",
              "url": "http://code.activestate.com/lists/perl5-porters/187763/"
            },
            {
              "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=884354",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
            },
            {
              "name": "USN-2099-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2099-1"
            },
            {
              "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
              "refsource": "MLIST",
              "url": "http://code.activestate.com/lists/perl5-porters/187746/"
            },
            {
              "name": "RHSA-2013:0685",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
            },
            {
              "name": "56950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56950"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-6329",
    "datePublished": "2013-01-04T21:00:00",
    "dateReserved": "2012-12-10T00:00:00",
    "dateUpdated": "2024-08-06T21:28:39.568Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-6329\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2013-01-04T21:55:01.710\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n _compile en Maketext.pm en la implementaci\u00f3n de Locale::Maketext en Perl anteriores a v5.17.7 no gestionan de forma adecuada los slash cruzados (\\\\) y lo nombres de m\u00e9todos cualificados durante la compilaci\u00f3n o notaci\u00f3n de comillas, lo que permite a atacantes dependiendo del contexto a ejecutar comandos a trav\u00e9s de entradas manipulados sobre una aplicaci\u00f3n que acepta la traslaci\u00f3n de cadenas desde usuarios, como se demostr\u00f3 por la aplicaci\u00f3n TWiki anteriores a v5.1.3, y la aplicaci\u00f3n Foswiki v1.0.x hasta v1.0.10 y v1.1.x hasta v1.1.6.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.16.2\",\"matchCriteriaId\":\"7FA2D667-D3E6-4BC2-8477-3C938C9C0CA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"777EC860-FB16-4B15-A8BE-3EAE9FD8A99D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B84C088-F29F-4498-A390-187505361962\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17E86767-47EB-4A39-B8E1-A4B9AB4BC20E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB77E3D6-9F24-4C51-86E4-CD014DF0F66E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D67E248-C0B8-4713-9D9A-47097885A2C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B32436EE-DA64-41AD-B967-26C6D4973FC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF46E50D-AE29-49FD-884B-488D9EB879D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77B23E85-8167-4B17-8D76-BD807067BB4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8355C16E-16D4-4A68-BFD3-125892E3FA1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85FFA753-4B14-4B52-941F-C33D41451EF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B99FD006-688D-43BB-901A-FB9192157947\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBD582A1-DCCF-4D54-8177-45E861A0C263\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5AF4FAA-A591-43FB-A9B1-FD47EF0AC622\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BC3F8EA-BE60-4EAB-A9B9-DB1368B5430C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc0:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0D13359-AC5F-40CB-B906-8E03526CE045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5E92FB2-7C21-4F06-AE3F-562551A758AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D213529E-33EF-43D1-A673-3C94191427D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6539E09-4DC5-4C53-AFF1-70D06BBA9E7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"52D8DF08-AE73-4529-B212-CA31F02A719E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA054FCE-FABC-4EB5-9759-F77C6F250B44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB5DDFC6-4EDF-452A-B561-C9115D91FB3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1DBAB61-4BFB-4664-98CF-77C617F982A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A7580C2-44DE-48E5-AC26-A221537C95D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54E04A5E-BE90-4A31-8C1D-09A91DD3E7DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A52ADD6-05DE-4A16-9745-D92CD5F46502\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFF99954-5B94-4092-83B9-7D17EEDB30A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"38A25AC3-1C81-4234-8B7E-0D59EA1F103B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"93E670B7-6956-4A13-A2A8-F675C0B093FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"23F1C64E-1446-409D-9F53-1C03724A10E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93813F8D-F22F-43E3-B894-BEB7FA6204F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B280339A-1CED-4FBD-8B3C-A48B07FE9BAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC85766E-3A59-4711-85C9-62AC01F2A87D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AC9AA38-4A25-4825-9EDD-E93353A8B195\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"388E8952-47B7-426E-AE35-0216FD60CC8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"105AB2DD-5E61-4369-8383-B7BF13B85444\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF2F4C5C-2B56-450A-813F-254019FBB854\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"226424B4-7299-4E28-BBB1-0FCC9E2602E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C16C918C-A1C4-425B-9C0C-B239B3482A77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5393E265-60C1-43A6-9EFE-505A115053DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DD50D93-8395-4698-A12B-D9CAAB022BF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04EE04B4-71DD-4A87-BA2D-79954AEF5DD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A968B30-8456-49C2-A9B0-6CF55CB3C7B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"66BF9787-C734-43DA-B8BF-FF6D6F4E802A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D94BF151-572F-4C50-8E47-9B8BCDD16A77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5114F054-E5AF-4905-83DD-459E1D56B5DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91B91435-67DA-49E1-A37F-7839728F17BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"851028B9-65A4-4A4F-9C40-930B0B9A8797\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7AD4720-7A84-4D02-8DDC-1B91A08D98D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.16.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9E3D711-A503-480F-B1EC-EC433F7DD644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.16.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38179468-F93E-4E3C-8213-5F4A903B186A\"}]}]}],\"references\":[{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187746/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187763/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://openwall.com/lists/oss-security/2012/12/11/4\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0685.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sourceforge.net/mailarchive/message.php?msg_id=30219695\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/56950\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2099-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=884354\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187746/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187763/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2012/12/11/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0685.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sourceforge.net/mailarchive/message.php?msg_id=30219695\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/56950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2099-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=884354\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.