CVEvulnerability
CVE-2005-0130
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-04-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.
Affected configurations
• berlios konversation 0.15
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110626383310742&w=2 marc.info
- http://secunia.com/advisories/13919 secunia.com
- http://secunia.com/advisories/13989 secunia.com
- http://securitytracker.com/id?1012972 securitytracker.com
- http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml www.gentoo.org
- http://www.kde.org/info/security/advisory-20050121-1.txt www.kde.org
- http://www.securityfocus.com/bid/12312 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html lists.grok.org.uk
- http://marc.info/?l=bugtraq&m=110626383310742&w=2 marc.info
- http://secunia.com/advisories/13919 secunia.com
- http://secunia.com/advisories/13989 secunia.com
- http://securitytracker.com/id?1012972 securitytracker.com
- http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml www.gentoo.org
- http://www.kde.org/info/security/advisory-20050121-1.txt www.kde.org
- http://www.securityfocus.com/bid/12312 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19008 exchange.xforce.ibmcloud.com