cve-2012-6329
Vulnerability from cvelistv5
Published
2013-01-04 21:00
Modified
2024-08-06 21:28
Severity ?
Summary
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
References
cve@mitre.orghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224
cve@mitre.orghttp://code.activestate.com/lists/perl5-porters/187746/
cve@mitre.orghttp://code.activestate.com/lists/perl5-porters/187763/
cve@mitre.orghttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
cve@mitre.orghttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
cve@mitre.orghttp://openwall.com/lists/oss-security/2012/12/11/4
cve@mitre.orghttp://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod
cve@mitre.orghttp://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8Patch
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2013-0685.html
cve@mitre.orghttp://sourceforge.net/mailarchive/message.php?msg_id=30219695
cve@mitre.orghttp://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2013:113
cve@mitre.orghttp://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
cve@mitre.orghttp://www.securityfocus.com/bid/56950
cve@mitre.orghttp://www.ubuntu.com/usn/USN-2099-1
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=884354
cve@mitre.orghttps://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032
af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224
af854a3a-2127-422b-91ae-364da2661108http://code.activestate.com/lists/perl5-porters/187746/
af854a3a-2127-422b-91ae-364da2661108http://code.activestate.com/lists/perl5-porters/187763/
af854a3a-2127-422b-91ae-364da2661108http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
af854a3a-2127-422b-91ae-364da2661108http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2012/12/11/4
af854a3a-2127-422b-91ae-364da2661108http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod
af854a3a-2127-422b-91ae-364da2661108http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8Patch
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2013-0685.html
af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/mailarchive/message.php?msg_id=30219695
af854a3a-2127-422b-91ae-364da2661108http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2013:113
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/56950
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-2099-1
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=884354
af854a3a-2127-422b-91ae-364da2661108https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:28:39.568Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "MDVSA-2013:113",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
          },
          {
            "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
          },
          {
            "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://code.activestate.com/lists/perl5-porters/187763/"
          },
          {
            "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
          },
          {
            "name": "USN-2099-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2099-1"
          },
          {
            "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://code.activestate.com/lists/perl5-porters/187746/"
          },
          {
            "name": "RHSA-2013:0685",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
          },
          {
            "name": "56950",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/56950"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-06T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "MDVSA-2013:113",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
        },
        {
          "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
        },
        {
          "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://code.activestate.com/lists/perl5-porters/187763/"
        },
        {
          "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
        },
        {
          "name": "USN-2099-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2099-1"
        },
        {
          "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://code.activestate.com/lists/perl5-porters/187746/"
        },
        {
          "name": "RHSA-2013:0685",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
        },
        {
          "name": "56950",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/56950"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-6329",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "MDVSA-2013:113",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"
            },
            {
              "name": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329",
              "refsource": "CONFIRM",
              "url": "http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"
            },
            {
              "name": "[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution",
              "refsource": "MLIST",
              "url": "http://sourceforge.net/mailarchive/message.php?msg_id=30219695"
            },
            {
              "name": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8",
              "refsource": "CONFIRM",
              "url": "http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"
            },
            {
              "name": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod",
              "refsource": "CONFIRM",
              "url": "http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"
            },
            {
              "name": "[perl5-porters] 20121205 Re: security notice: Locale::Maketext",
              "refsource": "MLIST",
              "url": "http://code.activestate.com/lists/perl5-porters/187763/"
            },
            {
              "name": "[oss-security] 20121211 Re: CVE request: perl-modules",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2012/12/11/4"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=884354",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=884354"
            },
            {
              "name": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032",
              "refsource": "CONFIRM",
              "url": "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"
            },
            {
              "name": "USN-2099-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2099-1"
            },
            {
              "name": "[perl5-porters] 20121205 security notice: Locale::Maketext",
              "refsource": "MLIST",
              "url": "http://code.activestate.com/lists/perl5-porters/187746/"
            },
            {
              "name": "RHSA-2013:0685",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0685.html"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735"
            },
            {
              "name": "56950",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/56950"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-6329",
    "datePublished": "2013-01-04T21:00:00",
    "dateReserved": "2012-12-10T00:00:00",
    "dateUpdated": "2024-08-06T21:28:39.568Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2012-6329\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2013-01-04T21:55:01.710\",\"lastModified\":\"2024-11-21T01:46:01.063\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n _compile en Maketext.pm en la implementaci\u00f3n de Locale::Maketext en Perl anteriores a v5.17.7 no gestionan de forma adecuada los slash cruzados (\\\\) y lo nombres de m\u00e9todos cualificados durante la compilaci\u00f3n o notaci\u00f3n de comillas, lo que permite a atacantes dependiendo del contexto a ejecutar comandos a trav\u00e9s de entradas manipulados sobre una aplicaci\u00f3n que acepta la traslaci\u00f3n de cadenas desde usuarios, como se demostr\u00f3 por la aplicaci\u00f3n TWiki anteriores a v5.1.3, y la aplicaci\u00f3n Foswiki v1.0.x hasta v1.0.10 y v1.1.x hasta v1.1.6.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.16.2\",\"matchCriteriaId\":\"7FA2D667-D3E6-4BC2-8477-3C938C9C0CA7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"777EC860-FB16-4B15-A8BE-3EAE9FD8A99D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B84C088-F29F-4498-A390-187505361962\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17E86767-47EB-4A39-B8E1-A4B9AB4BC20E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB77E3D6-9F24-4C51-86E4-CD014DF0F66E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D67E248-C0B8-4713-9D9A-47097885A2C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B32436EE-DA64-41AD-B967-26C6D4973FC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.10.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF46E50D-AE29-49FD-884B-488D9EB879D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77B23E85-8167-4B17-8D76-BD807067BB4D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8355C16E-16D4-4A68-BFD3-125892E3FA1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85FFA753-4B14-4B52-941F-C33D41451EF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B99FD006-688D-43BB-901A-FB9192157947\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBD582A1-DCCF-4D54-8177-45E861A0C263\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.11.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5AF4FAA-A591-43FB-A9B1-FD47EF0AC622\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BC3F8EA-BE60-4EAB-A9B9-DB1368B5430C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc0:*:*:*:*:*:*\",\"matchCriteriaId\":\"C0D13359-AC5F-40CB-B906-8E03526CE045\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5E92FB2-7C21-4F06-AE3F-562551A758AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D213529E-33EF-43D1-A673-3C94191427D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6539E09-4DC5-4C53-AFF1-70D06BBA9E7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"52D8DF08-AE73-4529-B212-CA31F02A719E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA054FCE-FABC-4EB5-9759-F77C6F250B44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB5DDFC6-4EDF-452A-B561-C9115D91FB3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B1DBAB61-4BFB-4664-98CF-77C617F982A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A7580C2-44DE-48E5-AC26-A221537C95D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54E04A5E-BE90-4A31-8C1D-09A91DD3E7DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A52ADD6-05DE-4A16-9745-D92CD5F46502\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFF99954-5B94-4092-83B9-7D17EEDB30A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"38A25AC3-1C81-4234-8B7E-0D59EA1F103B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"93E670B7-6956-4A13-A2A8-F675C0B093FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.12.3:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"23F1C64E-1446-409D-9F53-1C03724A10E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93813F8D-F22F-43E3-B894-BEB7FA6204F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B280339A-1CED-4FBD-8B3C-A48B07FE9BAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC85766E-3A59-4711-85C9-62AC01F2A87D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AC9AA38-4A25-4825-9EDD-E93353A8B195\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"388E8952-47B7-426E-AE35-0216FD60CC8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"105AB2DD-5E61-4369-8383-B7BF13B85444\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF2F4C5C-2B56-450A-813F-254019FBB854\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"226424B4-7299-4E28-BBB1-0FCC9E2602E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C16C918C-A1C4-425B-9C0C-B239B3482A77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5393E265-60C1-43A6-9EFE-505A115053DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DD50D93-8395-4698-A12B-D9CAAB022BF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.13.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04EE04B4-71DD-4A87-BA2D-79954AEF5DD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A968B30-8456-49C2-A9B0-6CF55CB3C7B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"66BF9787-C734-43DA-B8BF-FF6D6F4E802A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D94BF151-572F-4C50-8E47-9B8BCDD16A77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5114F054-E5AF-4905-83DD-459E1D56B5DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91B91435-67DA-49E1-A37F-7839728F17BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"851028B9-65A4-4A4F-9C40-930B0B9A8797\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.14.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F7AD4720-7A84-4D02-8DDC-1B91A08D98D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.16.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9E3D711-A503-480F-B1EC-EC433F7DD644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:perl:perl:5.16.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38179468-F93E-4E3C-8213-5F4A903B186A\"}]}]}],\"references\":[{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187746/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187763/\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://openwall.com/lists/oss-security/2012/12/11/4\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0685.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sourceforge.net/mailarchive/message.php?msg_id=30219695\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/56950\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2099-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=884354\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187746/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://code.activestate.com/lists/perl5-porters/187763/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10735\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://openwall.com/lists/oss-security/2012/12/11/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0685.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sourceforge.net/mailarchive/message.php?msg_id=30219695\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/56950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.ubuntu.com/usn/USN-2099-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=884354\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.