{"api_version":"1","generated_at":"2026-07-23T05:37:49+00:00","cve":"CVE-2012-6329","urls":{"html":"https://cve.report/CVE-2012-6329","api":"https://cve.report/api/cve/CVE-2012-6329.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-6329","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-6329"},"summary":{"title":"CVE-2012-6329","description":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-01-04 21:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-94","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329","name":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityAlert-CVE-2012-6329 < Codev < TWiki","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"http://www.securityfocus.com/bid/56950","name":"http://www.securityfocus.com/bid/56950","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TWiki and Foswiki 'MAKETEXT' Variable Multiple Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","name":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle VM Server for x86 Bulletin - July 2016","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://code.activestate.com/lists/perl5-porters/187763/","name":"http://code.activestate.com/lists/perl5-porters/187763/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Re: security notice: Locale::Maketext « perl5-porters « ActiveState List Archives","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#695224 - perl-modules: Locale::Maketext code injection - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354","name":"https://bugzilla.redhat.com/show_bug.cgi?id=884354","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 884354 – CVE-2012-6329 perl: possible arbitrary code execution via Locale::Maketext","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8","name":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"perl5.git.perl.org Git - perl.git/commit","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://code.activestate.com/lists/perl5-porters/187746/","name":"http://code.activestate.com/lists/perl5-porters/187746/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"security notice: Locale::Maketext « perl5-porters « ActiveState List Archives","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support / Security / Advisories /  / MDVSA-2013:113 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod","name":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"perl5.git.perl.org Git","mime":"text/xml","httpstatus":"200","archivestatus":"404"},{"url":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695","name":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Foswiki / Mailing Lists","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"http://openwall.com/lists/oss-security/2012/12/11/4","name":"http://openwall.com/lists/oss-security/2012/12/11/4","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: perl-modules","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-2099-1","name":"http://www.ubuntu.com/usn/USN-2099-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-2099-1: Perl vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","name":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Juniper Networks - 2015-10 Security Bulletin: CTPView: Multiple Vulnerabilities in CTPView","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","name":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"2016-04 Security Bulletin: CTP Series: Multiple vulnerabilities in CTP Series - Juniper Networks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032","name":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support/Advisories/MGASA-2013-0032 - Mageia wiki","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0685.html","name":"http://rhn.redhat.com/errata/RHSA-2013-0685.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6329","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6329","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.1","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.10.1","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.11.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.0","cpe7":"rc5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.1","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.1","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.2","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.3","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.3","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.12.3","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.13.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.14.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.16.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"5.16.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6329","vulnerable":"1","versionEndIncluding":"5.16.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:28:39.568Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"name":"MDVSA-2013:113","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"},{"name":"[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"},{"name":"[perl5-porters] 20121205 Re: security notice: Locale::Maketext","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://code.activestate.com/lists/perl5-porters/187763/"},{"name":"[oss-security] 20121211 Re: CVE request: perl-modules","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2012/12/11/4"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"},{"name":"USN-2099-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-2099-1"},{"name":"[perl5-porters] 20121205 security notice: Locale::Maketext","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://code.activestate.com/lists/perl5-porters/187746/"},{"name":"RHSA-2013:0685","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2013-0685.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735"},{"name":"56950","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/56950"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-12-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-12-06T18:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"name":"MDVSA-2013:113","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"},{"tags":["x_refsource_CONFIRM"],"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"},{"name":"[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution","tags":["mailing-list","x_refsource_MLIST"],"url":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695"},{"tags":["x_refsource_CONFIRM"],"url":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"},{"tags":["x_refsource_CONFIRM"],"url":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"},{"name":"[perl5-porters] 20121205 Re: security notice: Locale::Maketext","tags":["mailing-list","x_refsource_MLIST"],"url":"http://code.activestate.com/lists/perl5-porters/187763/"},{"name":"[oss-security] 20121211 Re: CVE request: perl-modules","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2012/12/11/4"},{"tags":["x_refsource_MISC"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354"},{"tags":["x_refsource_CONFIRM"],"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"},{"name":"USN-2099-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-2099-1"},{"name":"[perl5-porters] 20121205 security notice: Locale::Maketext","tags":["mailing-list","x_refsource_MLIST"],"url":"http://code.activestate.com/lists/perl5-porters/187746/"},{"name":"RHSA-2013:0685","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2013-0685.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705"},{"tags":["x_refsource_CONFIRM"],"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735"},{"name":"56950","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/56950"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-6329","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"},{"name":"MDVSA-2013:113","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113"},{"name":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329","refsource":"CONFIRM","url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329"},{"name":"[foswiki-announce] 20121212 Security Alert CVE-2012-6329: Foswiki MAKETEXT Variable Allows Arbitrary Shell Command Execution","refsource":"MLIST","url":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695"},{"name":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8","refsource":"CONFIRM","url":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8"},{"name":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod","refsource":"CONFIRM","url":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod"},{"name":"[perl5-porters] 20121205 Re: security notice: Locale::Maketext","refsource":"MLIST","url":"http://code.activestate.com/lists/perl5-porters/187763/"},{"name":"[oss-security] 20121211 Re: CVE request: perl-modules","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2012/12/11/4"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=884354","refsource":"MISC","url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354"},{"name":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032","refsource":"CONFIRM","url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032"},{"name":"USN-2099-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-2099-1"},{"name":"[perl5-porters] 20121205 security notice: Locale::Maketext","refsource":"MLIST","url":"http://code.activestate.com/lists/perl5-porters/187746/"},{"name":"RHSA-2013:0685","refsource":"REDHAT","url":"http://rhn.redhat.com/errata/RHSA-2013-0685.html"},{"name":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","refsource":"CONFIRM","url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705"},{"name":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","refsource":"CONFIRM","url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735"},{"name":"56950","refsource":"BID","url":"http://www.securityfocus.com/bid/56950"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-6329","datePublished":"2013-01-04T21:00:00.000Z","dateReserved":"2012-12-10T00:00:00.000Z","dateUpdated":"2024-08-06T21:28:39.568Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-01-04 21:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-94","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.16.2","matchCriteriaId":"7FA2D667-D3E6-4BC2-8477-3C938C9C0CA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10:*:*:*:*:*:*:*","matchCriteriaId":"777EC860-FB16-4B15-A8BE-3EAE9FD8A99D"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*","matchCriteriaId":"9B84C088-F29F-4498-A390-187505361962"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.0:rc1:*:*:*:*:*:*","matchCriteriaId":"17E86767-47EB-4A39-B8E1-A4B9AB4BC20E"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DB77E3D6-9F24-4C51-86E4-CD014DF0F66E"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*","matchCriteriaId":"4D67E248-C0B8-4713-9D9A-47097885A2C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.1:rc1:*:*:*:*:*:*","matchCriteriaId":"B32436EE-DA64-41AD-B967-26C6D4973FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.10.1:rc2:*:*:*:*:*:*","matchCriteriaId":"CF46E50D-AE29-49FD-884B-488D9EB879D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.0:*:*:*:*:*:*:*","matchCriteriaId":"77B23E85-8167-4B17-8D76-BD807067BB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.1:*:*:*:*:*:*:*","matchCriteriaId":"8355C16E-16D4-4A68-BFD3-125892E3FA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.2:*:*:*:*:*:*:*","matchCriteriaId":"85FFA753-4B14-4B52-941F-C33D41451EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.3:*:*:*:*:*:*:*","matchCriteriaId":"B99FD006-688D-43BB-901A-FB9192157947"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.4:*:*:*:*:*:*:*","matchCriteriaId":"DBD582A1-DCCF-4D54-8177-45E861A0C263"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.11.5:*:*:*:*:*:*:*","matchCriteriaId":"E5AF4FAA-A591-43FB-A9B1-FD47EF0AC622"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:*:*:*:*:*:*:*","matchCriteriaId":"9BC3F8EA-BE60-4EAB-A9B9-DB1368B5430C"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc0:*:*:*:*:*:*","matchCriteriaId":"C0D13359-AC5F-40CB-B906-8E03526CE045"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc1:*:*:*:*:*:*","matchCriteriaId":"A5E92FB2-7C21-4F06-AE3F-562551A758AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D213529E-33EF-43D1-A673-3C94191427D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc3:*:*:*:*:*:*","matchCriteriaId":"E6539E09-4DC5-4C53-AFF1-70D06BBA9E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc4:*:*:*:*:*:*","matchCriteriaId":"52D8DF08-AE73-4529-B212-CA31F02A719E"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.0:rc5:*:*:*:*:*:*","matchCriteriaId":"EA054FCE-FABC-4EB5-9759-F77C6F250B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.1:*:*:*:*:*:*:*","matchCriteriaId":"BB5DDFC6-4EDF-452A-B561-C9115D91FB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.1:rc1:*:*:*:*:*:*","matchCriteriaId":"B1DBAB61-4BFB-4664-98CF-77C617F982A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.1:rc2:*:*:*:*:*:*","matchCriteriaId":"8A7580C2-44DE-48E5-AC26-A221537C95D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.2:*:*:*:*:*:*:*","matchCriteriaId":"54E04A5E-BE90-4A31-8C1D-09A91DD3E7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.2:rc1:*:*:*:*:*:*","matchCriteriaId":"1A52ADD6-05DE-4A16-9745-D92CD5F46502"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.3:*:*:*:*:*:*:*","matchCriteriaId":"CFF99954-5B94-4092-83B9-7D17EEDB30A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.3:rc1:*:*:*:*:*:*","matchCriteriaId":"38A25AC3-1C81-4234-8B7E-0D59EA1F103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.3:rc2:*:*:*:*:*:*","matchCriteriaId":"93E670B7-6956-4A13-A2A8-F675C0B093FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.12.3:rc3:*:*:*:*:*:*","matchCriteriaId":"23F1C64E-1446-409D-9F53-1C03724A10E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.0:*:*:*:*:*:*:*","matchCriteriaId":"93813F8D-F22F-43E3-B894-BEB7FA6204F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.1:*:*:*:*:*:*:*","matchCriteriaId":"B280339A-1CED-4FBD-8B3C-A48B07FE9BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.2:*:*:*:*:*:*:*","matchCriteriaId":"AC85766E-3A59-4711-85C9-62AC01F2A87D"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.3:*:*:*:*:*:*:*","matchCriteriaId":"1AC9AA38-4A25-4825-9EDD-E93353A8B195"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.4:*:*:*:*:*:*:*","matchCriteriaId":"388E8952-47B7-426E-AE35-0216FD60CC8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.5:*:*:*:*:*:*:*","matchCriteriaId":"105AB2DD-5E61-4369-8383-B7BF13B85444"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.6:*:*:*:*:*:*:*","matchCriteriaId":"FF2F4C5C-2B56-450A-813F-254019FBB854"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.7:*:*:*:*:*:*:*","matchCriteriaId":"226424B4-7299-4E28-BBB1-0FCC9E2602E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.8:*:*:*:*:*:*:*","matchCriteriaId":"C16C918C-A1C4-425B-9C0C-B239B3482A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.9:*:*:*:*:*:*:*","matchCriteriaId":"5393E265-60C1-43A6-9EFE-505A115053DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.10:*:*:*:*:*:*:*","matchCriteriaId":"1DD50D93-8395-4698-A12B-D9CAAB022BF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.13.11:*:*:*:*:*:*:*","matchCriteriaId":"04EE04B4-71DD-4A87-BA2D-79954AEF5DD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.0:*:*:*:*:*:*:*","matchCriteriaId":"8A968B30-8456-49C2-A9B0-6CF55CB3C7B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.0:rc1:*:*:*:*:*:*","matchCriteriaId":"66BF9787-C734-43DA-B8BF-FF6D6F4E802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.0:rc2:*:*:*:*:*:*","matchCriteriaId":"D94BF151-572F-4C50-8E47-9B8BCDD16A77"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.0:rc3:*:*:*:*:*:*","matchCriteriaId":"5114F054-E5AF-4905-83DD-459E1D56B5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.1:*:*:*:*:*:*:*","matchCriteriaId":"91B91435-67DA-49E1-A37F-7839728F17BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.2:*:*:*:*:*:*:*","matchCriteriaId":"851028B9-65A4-4A4F-9C40-930B0B9A8797"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.14.3:*:*:*:*:*:*:*","matchCriteriaId":"F7AD4720-7A84-4D02-8DDC-1B91A08D98D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.16.0:*:*:*:*:*:*:*","matchCriteriaId":"A9E3D711-A503-480F-B1EC-EC433F7DD644"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:5.16.1:*:*:*:*:*:*:*","matchCriteriaId":"38179468-F93E-4E3C-8213-5F4A903B186A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"6329","Ordinal":"1","Title":"CVE-2012-6329","CVE":"CVE-2012-6329","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"6329","Ordinal":"1","NoteData":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.","Type":"Description","Title":"CVE-2012-6329"},{"CveYear":"2012","CveId":"6329","Ordinal":"2","NoteData":"2013-01-04","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"6329","Ordinal":"3","NoteData":"2016-12-06","Type":"Other","Title":"Modified"}]}}}