Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-1095

Опубликовано: 06 фев. 2014
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:opensuse:osc:*:*:*:*:*:*:*:*
Версия до 0.133 (включая)
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.1:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.00409
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
около 12 лет назад

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

debian
около 12 лет назад

osc before 0.134 might allow remote OBS repository servers or package ...

github
больше 3 лет назад

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

EPSS

Процентиль: 61%
0.00409
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-264