vulnwire
7.5high

CVE-2005-0130

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel name…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.9%
percentile 87%
Public exploits
0
none known

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.

Exploit prediction (EPSS)

2.90% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • secunia.com /advisories/13919 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2005-January/031033.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • kde.org /info/security/advisory-20050121-1.txt · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/12312 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/13989 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/19008 · vdb-entry, x_refsource_XF, x_transferred
  • gentoo.org /security/en/glsa/glsa-200501-34.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • marc.info /?l=bugtraq&m=110626383310742&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securitytracker.com /id?1012972 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.