{"id":"CVE-2012-6329","title":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and f","published":"2013-01-04T17:55:01.710Z","updated":"2026-06-16T19:48:00.463Z","severity":"high","cvssScore":7.5,"epss":0.63738,"epssPct":0.99231,"kev":false,"maturity":"weaponized","actionScore":49,"primaryVendor":"perl","primaryProduct":"perl","cweId":"CWE-94","fixAvailable":true,"tags":["pre-auth","rce","remote"],"epssDelta7":0.0025,"summary":"The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.","cvssVector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":"Improper Control of Generation of Code ('Code Injection')","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-06T21:28:39.568Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:46:47.332Z","exploitdb":"2026-11-13T03:17:58.683Z","metasploit":"2026-11-13T03:18:09.107Z"},"cvssCna":null,"hasPatchRef":true,"credits":[],"counts":{"exploitdb":2,"metasploit":2,"nuclei":0,"githubPoc":0},"products":[{"vendor":"perl","product":"perl","cpe":"cpe:2.3:a:perl:perl"}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=695224","tags":null},{"url":"http://code.activestate.com/lists/perl5-porters/187746/","tags":null},{"url":"http://code.activestate.com/lists/perl5-porters/187763/","tags":null},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","tags":null},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","tags":null},{"url":"http://openwall.com/lists/oss-security/2012/12/11/4","tags":null},{"url":"http://perl5.git.perl.org/perl.git/blob/HEAD:/pod/perl5177delta.pod","tags":null},{"url":"http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8","tags":"Patch"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0685.html","tags":null},{"url":"http://sourceforge.net/mailarchive/message.php?msg_id=30219695","tags":null},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2012-6329","tags":null},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:113","tags":null},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":null},{"url":"http://www.securityfocus.com/bid/56950","tags":null},{"url":"http://www.ubuntu.com/usn/USN-2099-1","tags":null},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354","tags":null},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032","tags":null}],"exploits":[{"source":"exploitdb","kind":"remote","date":"2012-12-23"},{"source":"exploitdb","kind":"remote","date":"2012-12-23"},{"source":"metasploit","kind":"exploit","date":"2012-12-03"},{"source":"metasploit","kind":"exploit","date":"2012-12-15"}],"analysis":null,"affectedVersions":[{"vendor":"perl","product":"perl","version":"*","vsi":null,"vse":null,"vei":"5.16.2","vee":null},{"vendor":"perl","product":"perl","version":"5.10","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.10.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.10.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.2","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.3","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.4","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.11.5","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.12.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.12.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.12.2","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.12.3","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.10","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.11","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.2","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.3","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.4","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.5","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.6","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.7","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.8","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.13.9","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.14.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.14.1","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.14.2","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.14.3","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.16.0","vsi":null,"vse":null,"vei":null,"vee":null},{"vendor":"perl","product":"perl","version":"5.16.1","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}