CVE-2012-6329

CVE-2012-6329

Published · Updated

Follow this CVE+ Monitor perl

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 64%
from disclosure to weaponsame day
Published on NVDJan 4
1st PoCDec 23
metasploitDec 3
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product
OpenShift Enterprise 1
none_available: Affected
Fixed
6 products (800 components)
Red Hat Enterprise Linux Desktop (v. 6) · Red Hat Enterprise Linux HPC Node (v. 6) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Workstation (v. 6) · Red Hat Enterprise Linux (v. 5 server) · and others 1
fix ↗
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.