CVE-2012-6329: Code Injection

Q: What is the severity of CVE-2012-6329?

CVE-2012-6329 is considered to have a high severity due to its potential for arbitrary code execution.

Q: How do I fix CVE-2012-6329?

To fix CVE-2012-6329, upgrade to Perl version 5.16.2 or later.

Q: What versions of Perl are affected by CVE-2012-6329?

CVE-2012-6329 affects Perl versions up to and including 5.16.2.

Q: What type of vulnerability is CVE-2012-6329?

CVE-2012-6329 is a code execution vulnerability in the Locale::Maketext module of Perl.

Q: Can CVE-2012-6329 be exploited remotely?

Yes, CVE-2012-6329 can be exploited remotely if user input is processed in an unsafe manner.

Published Dec 6, 2012

Updated

A commit to the upstream perl git repository [1] indicated that perl's Locale::Maketext was vulnerable to a flaw that could lead to arbitrary code execution of this function was executed on user-supplied input. Quoting the commit message:

Case 61251: This commit fixes a misparse of maketext strings that could lead to arbitrary code execution. Basically, maketext was compiling bracket notation into functions, but neglected to escape backslashes inside the content or die on fully-qualified method names when generating the code. This change escapes all such backslashes and dies when a method name with a colon or apostrophe is specified.

[1] http://perl5.git.perl.org/perl.git/commit/1735f6f53ca19f99c6e9e39496c486af323ba6a8

Other sources

The compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.

— MITRE

Affected Software

51 affected components

Perl Perl<=5.16.2

Perl Perl=5.10

Perl Perl=5.10.0

Perl Perl=5.10.0-rc1

Perl Perl=5.10.0-rc2

Perl Perl=5.10.1

Perl Perl=5.10.1-rc1

Perl Perl=5.10.1-rc2

Perl Perl=5.11.0

Perl Perl=5.11.1

Perl Perl=5.11.2

Perl Perl=5.11.3

Perl Perl=5.11.4

Perl Perl=5.11.5

Perl Perl=5.12.0

Perl Perl=5.12.0-rc0

Perl Perl=5.12.0-rc1

Perl Perl=5.12.0-rc2

Perl Perl=5.12.0-rc3

Perl Perl=5.12.0-rc4

Perl Perl=5.12.0-rc5

Perl Perl=5.12.1

Perl Perl=5.12.1-rc1

Perl Perl=5.12.1-rc2

Perl Perl=5.12.2

Perl Perl=5.12.2-rc1

Perl Perl=5.12.3

Perl Perl=5.12.3-rc1

Perl Perl=5.12.3-rc2

Perl Perl=5.12.3-rc3

Perl Perl=5.13.0

Perl Perl=5.13.1

Perl Perl=5.13.2

Perl Perl=5.13.3

Perl Perl=5.13.4

Perl Perl=5.13.5

Perl Perl=5.13.6

Perl Perl=5.13.7

Perl Perl=5.13.8

Perl Perl=5.13.9

Perl Perl=5.13.10

Perl Perl=5.13.11

Perl Perl=5.14.0

Perl Perl=5.14.0-rc1

Perl Perl=5.14.0-rc2

Perl Perl=5.14.0-rc3

Perl Perl=5.14.1

Perl Perl=5.14.2

Perl Perl=5.14.3

Perl Perl=5.16.0

Perl Perl=5.16.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade perl to a version that resolves this vulnerability.
Fixed in 5.17.7
Upgrade
Upgrade perl to a version that resolves this vulnerability.
Fixed in 5.17.7Patch 1735f6f53ca19f99c6e9e39496c486af323ba6a8

Event History

Dec 6, 2012

Data Sourced

via Red Hat·03:28 AM

DescriptionSeverityAffected Software

Jan 4, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-6329?

CVE-2012-6329 is considered to have a high severity due to its potential for arbitrary code execution.

How do I fix CVE-2012-6329?