Cloudanix VulnDB

CVE-2012-6329

None

CVSS

—

EPSS

63.7%

Published

Jan 4, 2013

CISA due date

—

The record

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 perl 0 5.14.2-16
Debian:12 perl 0 5.14.2-16
Debian:13 perl 0 5.14.2-16
Red Hat:enterprise_linux:5::server perl 0 4:5.8.8-40.el5_9
Red Hat:enterprise_linux:5::server perl-debuginfo 0 4:5.8.8-40.el5_9
Red Hat:enterprise_linux:5::server perl-suidperl 0 4:5.8.8-40.el5_9
Red Hat:enterprise_linux:6::client perl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-Archive-Extract 0 1:0.38-130.el6_4
Red Hat:enterprise_linux:6::client perl-Archive-Tar 0 0:1.58-130.el6_4
Red Hat:enterprise_linux:6::client perl-CGI 0 0:3.51-130.el6_4
Red Hat:enterprise_linux:6::client perl-CPAN 0 0:1.9402-130.el6_4
Red Hat:enterprise_linux:6::client perl-CPANPLUS 0 0:0.88-130.el6_4
Red Hat:enterprise_linux:6::client perl-Compress-Raw-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-Compress-Raw-Zlib 0 1:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-Digest-SHA 0 1:5.47-130.el6_4
Red Hat:enterprise_linux:6::client perl-ExtUtils-CBuilder 0 1:0.27-130.el6_4
Red Hat:enterprise_linux:6::client perl-ExtUtils-Embed 0 0:1.28-130.el6_4
Red Hat:enterprise_linux:6::client perl-ExtUtils-MakeMaker 0 0:6.55-130.el6_4
Red Hat:enterprise_linux:6::client perl-ExtUtils-ParseXS 0 1:2.2003.0-130.el6_4
Red Hat:enterprise_linux:6::client perl-File-Fetch 0 0:0.26-130.el6_4
Red Hat:enterprise_linux:6::client perl-IO-Compress-Base 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-IO-Compress-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-IO-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::client perl-IO-Zlib 0 1:1.09-130.el6_4
Red Hat:enterprise_linux:6::client perl-IPC-Cmd 0 1:0.56-130.el6_4
Red Hat:enterprise_linux:6::client perl-Locale-Maketext-Simple 0 1:0.18-130.el6_4
Red Hat:enterprise_linux:6::client perl-Log-Message 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::client perl-Log-Message-Simple 0 0:0.04-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-Build 0 1:0.3500-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-CoreList 0 0:2.18-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-Load 0 1:0.16-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-Load-Conditional 0 0:0.30-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-Loaded 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::client perl-Module-Pluggable 0 1:3.90-130.el6_4
Red Hat:enterprise_linux:6::client perl-Object-Accessor 0 1:0.34-130.el6_4
Red Hat:enterprise_linux:6::client perl-Package-Constants 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::client perl-Params-Check 0 1:0.26-130.el6_4
Red Hat:enterprise_linux:6::client perl-Parse-CPAN-Meta 0 1:1.40-130.el6_4
Red Hat:enterprise_linux:6::client perl-Pod-Escapes 0 1:1.04-130.el6_4
Red Hat:enterprise_linux:6::client perl-Pod-Simple 0 1:3.13-130.el6_4
Red Hat:enterprise_linux:6::client perl-Term-UI 0 0:0.20-130.el6_4
Red Hat:enterprise_linux:6::client perl-Test-Harness 0 0:3.17-130.el6_4
Red Hat:enterprise_linux:6::client perl-Test-Simple 0 0:0.92-130.el6_4
Red Hat:enterprise_linux:6::client perl-Time-HiRes 0 4:1.9721-130.el6_4
Red Hat:enterprise_linux:6::client perl-Time-Piece 0 0:1.15-130.el6_4
Red Hat:enterprise_linux:6::client perl-core 0 0:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-debuginfo 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-devel 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-libs 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-parent 0 1:0.221-130.el6_4
Red Hat:enterprise_linux:6::client perl-suidperl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::client perl-version 0 3:0.77-130.el6_4
Red Hat:enterprise_linux:6::computenode perl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Archive-Extract 0 1:0.38-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Archive-Tar 0 0:1.58-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-CGI 0 0:3.51-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-CPAN 0 0:1.9402-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-CPANPLUS 0 0:0.88-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Compress-Raw-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Compress-Raw-Zlib 0 1:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Digest-SHA 0 1:5.47-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-ExtUtils-CBuilder 0 1:0.27-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-ExtUtils-Embed 0 0:1.28-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-ExtUtils-MakeMaker 0 0:6.55-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-ExtUtils-ParseXS 0 1:2.2003.0-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-File-Fetch 0 0:0.26-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-IO-Compress-Base 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-IO-Compress-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-IO-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-IO-Zlib 0 1:1.09-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-IPC-Cmd 0 1:0.56-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Locale-Maketext-Simple 0 1:0.18-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Log-Message 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Log-Message-Simple 0 0:0.04-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-Build 0 1:0.3500-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-CoreList 0 0:2.18-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-Load 0 1:0.16-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-Load-Conditional 0 0:0.30-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-Loaded 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Module-Pluggable 0 1:3.90-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Object-Accessor 0 1:0.34-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Package-Constants 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Params-Check 0 1:0.26-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Parse-CPAN-Meta 0 1:1.40-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Pod-Escapes 0 1:1.04-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Pod-Simple 0 1:3.13-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Term-UI 0 0:0.20-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Test-Harness 0 0:3.17-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Test-Simple 0 0:0.92-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Time-HiRes 0 4:1.9721-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-Time-Piece 0 0:1.15-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-core 0 0:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-debuginfo 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-devel 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-libs 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-parent 0 1:0.221-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-suidperl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::computenode perl-version 0 3:0.77-130.el6_4
Red Hat:enterprise_linux:6::server perl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-Archive-Extract 0 1:0.38-130.el6_4
Red Hat:enterprise_linux:6::server perl-Archive-Tar 0 0:1.58-130.el6_4
Red Hat:enterprise_linux:6::server perl-CGI 0 0:3.51-130.el6_4
Red Hat:enterprise_linux:6::server perl-CPAN 0 0:1.9402-130.el6_4
Red Hat:enterprise_linux:6::server perl-CPANPLUS 0 0:0.88-130.el6_4
Red Hat:enterprise_linux:6::server perl-Compress-Raw-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-Compress-Raw-Zlib 0 1:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-Digest-SHA 0 1:5.47-130.el6_4
Red Hat:enterprise_linux:6::server perl-ExtUtils-CBuilder 0 1:0.27-130.el6_4
Red Hat:enterprise_linux:6::server perl-ExtUtils-Embed 0 0:1.28-130.el6_4
Red Hat:enterprise_linux:6::server perl-ExtUtils-MakeMaker 0 0:6.55-130.el6_4
Red Hat:enterprise_linux:6::server perl-ExtUtils-ParseXS 0 1:2.2003.0-130.el6_4
Red Hat:enterprise_linux:6::server perl-File-Fetch 0 0:0.26-130.el6_4
Red Hat:enterprise_linux:6::server perl-IO-Compress-Base 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-IO-Compress-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-IO-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::server perl-IO-Zlib 0 1:1.09-130.el6_4
Red Hat:enterprise_linux:6::server perl-IPC-Cmd 0 1:0.56-130.el6_4
Red Hat:enterprise_linux:6::server perl-Locale-Maketext-Simple 0 1:0.18-130.el6_4
Red Hat:enterprise_linux:6::server perl-Log-Message 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::server perl-Log-Message-Simple 0 0:0.04-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-Build 0 1:0.3500-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-CoreList 0 0:2.18-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-Load 0 1:0.16-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-Load-Conditional 0 0:0.30-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-Loaded 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::server perl-Module-Pluggable 0 1:3.90-130.el6_4
Red Hat:enterprise_linux:6::server perl-Object-Accessor 0 1:0.34-130.el6_4
Red Hat:enterprise_linux:6::server perl-Package-Constants 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::server perl-Params-Check 0 1:0.26-130.el6_4
Red Hat:enterprise_linux:6::server perl-Parse-CPAN-Meta 0 1:1.40-130.el6_4
Red Hat:enterprise_linux:6::server perl-Pod-Escapes 0 1:1.04-130.el6_4
Red Hat:enterprise_linux:6::server perl-Pod-Simple 0 1:3.13-130.el6_4
Red Hat:enterprise_linux:6::server perl-Term-UI 0 0:0.20-130.el6_4
Red Hat:enterprise_linux:6::server perl-Test-Harness 0 0:3.17-130.el6_4
Red Hat:enterprise_linux:6::server perl-Test-Simple 0 0:0.92-130.el6_4
Red Hat:enterprise_linux:6::server perl-Time-HiRes 0 4:1.9721-130.el6_4
Red Hat:enterprise_linux:6::server perl-Time-Piece 0 0:1.15-130.el6_4
Red Hat:enterprise_linux:6::server perl-core 0 0:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-debuginfo 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-devel 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-libs 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-parent 0 1:0.221-130.el6_4
Red Hat:enterprise_linux:6::server perl-suidperl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::server perl-version 0 3:0.77-130.el6_4
Red Hat:enterprise_linux:6::workstation perl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Archive-Extract 0 1:0.38-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Archive-Tar 0 0:1.58-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-CGI 0 0:3.51-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-CPAN 0 0:1.9402-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-CPANPLUS 0 0:0.88-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Compress-Raw-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Compress-Raw-Zlib 0 1:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Digest-SHA 0 1:5.47-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-ExtUtils-CBuilder 0 1:0.27-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-ExtUtils-Embed 0 0:1.28-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-ExtUtils-MakeMaker 0 0:6.55-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-ExtUtils-ParseXS 0 1:2.2003.0-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-File-Fetch 0 0:0.26-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-IO-Compress-Base 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-IO-Compress-Bzip2 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-IO-Compress-Zlib 0 0:2.020-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-IO-Zlib 0 1:1.09-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-IPC-Cmd 0 1:0.56-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Locale-Maketext-Simple 0 1:0.18-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Log-Message 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Log-Message-Simple 0 0:0.04-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-Build 0 1:0.3500-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-CoreList 0 0:2.18-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-Load 0 1:0.16-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-Load-Conditional 0 0:0.30-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-Loaded 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Module-Pluggable 0 1:3.90-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Object-Accessor 0 1:0.34-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Package-Constants 0 1:0.02-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Params-Check 0 1:0.26-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Parse-CPAN-Meta 0 1:1.40-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Pod-Escapes 0 1:1.04-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Pod-Simple 0 1:3.13-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Term-UI 0 0:0.20-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Test-Harness 0 0:3.17-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Test-Simple 0 0:0.92-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Time-HiRes 0 4:1.9721-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-Time-Piece 0 0:1.15-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-core 0 0:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-debuginfo 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-devel 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-libs 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-parent 0 1:0.221-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-suidperl 0 4:5.10.1-130.el6_4
Red Hat:enterprise_linux:6::workstation perl-version 0 3:0.77-130.el6_4

Related vulnerabilities