PT-2012-6007 · Weechat+1 · Weechat+1

Flashcode + 1 · Published 2012-12-03 · Updated 2014-02-07 · CVE-2012-5534

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WeeChat versions 0.3.0 through 0.3.9.1

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a command from a plugin, related to shell expansion, by exploiting the hook process function in the plugin API.

Recommendations For WeeChat versions 0.3.0 through 0.3.9.1, consider disabling the hook process function until a patch is available to prevent exploitation. Restrict access to plugins that utilize the hook process function to minimize the risk of arbitrary command execution. Avoid using shell metacharacters in commands from plugins to reduce the risk of shell expansion issues.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-5534

DSA-2598-1

OPENSUSE-SU-2013_0150-1

Affected Products

Suse

Weechat

References · 23

• https://security-tracker.debian.org/tracker/CVE-2012-5534 · Vendor Advisory
• http://weechat.org/security · Vendor Advisory
• http://secunia.com/advisories/51294 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5534 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-5534 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093516.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093495.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:136 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-5534 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2012-11/msg00087.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093260.html · Vendor Advisory
• http://secunia.com/advisories/51377 · Note
• http://support.novell.com/security/cve/CVE-2012-5854.html · Note
• https://savannah.nongnu.org/bugs/?37764 · Note