DEBIAN-CVE-2012-6329

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2012-6329
Published: 04 Jan 2013, 21:55
Last modified:28 Apr 2026, 20:04

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Jan 2013, 21:55
Published
Vulnerability first disclosed
28 Apr 2026, 20:04
Last Modified
Vulnerability information updated

Description

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.

Affected Systems

  • debian•perl

    < 5.14.2-16 | < 5.14.2-16 | < 5.14.2-16 | < 5.14.2-16

References (1)