CVE-2005-0130 Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the use...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| berlios konversation | = 0.15 | No fix listed |
| debian/konversation(Debian:12) | < 0.15-3 | 0.15-3 |
| debian/konversation(Debian:13) | < 0.15-3 | 0.15-3 |
| debian/konversation(Debian:14) | < 0.15-3 | 0.15-3 |
References
- 20050119 Multiple vulnerabilities in Konversation mailing-list
- 20050119 Multiple vulnerabilities in Konversation mailing-list
- 13919 third-party-advisory
- 13989 third-party-advisory
- 1012972 vdb-entry
- GLSA-200501-34 vendor-advisory
- www.kde.org
- 12312 vdb-entry
- konversation-perlscript-execute-code(19008) vdb-entry
- Debian Security Tracker CVE-2005-0130 vendor-advisory