CVE-2012-6143 - Vulnerability Details - OpenCVE

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ingy	Spoon

Configuration 1 [-]

cpe:2.3:a:ingy:spoon:0.24:*:*:*:*:perl:*:*

No data.

References

Link	Providers
http://seclists.org/oss-sec/2013/q2/318
http://www.securityfocus.com/bid/59834
https://exchange.xforce.ibmcloud.com/vulnerabilities/84197
https://rt.cpan.org/Public/Bug/Display.html?id=85217

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2014-06-04T23:00:00

Updated: 2024-08-06T21:28:39.553Z

Reserved: 2012-12-06T00:00:00

Link: CVE-2012-6143

Vulnrichment

No data.

NVD

Status : Modified

Published: 2014-06-04T23:55:03.740

Modified: 2024-11-21T01:45:54.490

Link: CVE-2012-6143

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ingy:spoon:0.24:*:*:*:*:perl:*:*", "matchCriteriaId": "7DAA9EDB-AD93-49D4-B5EE-53C4DCDE94FF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized."}, {"lang": "es", "value": "Spoon::Cookie en el m\u00f3dulo Spoon 0.24 para Perl no utiliza debidamente la funci\u00f3n Storable::thaw, lo que permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de una solicitud manipulada, lo que no se maneja debidamente cuando se deserializa."}], "id": "CVE-2012-6143", "lastModified": "2024-11-21T01:45:54.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-06-04T23:55:03.740", "references": [{"source": "secalert@redhat.com", "url": "http://seclists.org/oss-sec/2013/q2/318"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/59834"}, {"source": "secalert@redhat.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84197"}, {"source": "secalert@redhat.com", "url": "https://rt.cpan.org/Public/Bug/Display.html?id=85217"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/oss-sec/2013/q2/318"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/59834"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84197"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://rt.cpan.org/Public/Bug/Display.html?id=85217"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}