CVE-2005-0130

Published: Apr 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.

Affected (1)

Products: Berlios: Konversation

Berlios

1 product

Konversation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Berlios Konversation	Version 0.15

References (18)

http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110626383310742&w=2

Source: cve@mitre.org

http://secunia.com/advisories/13919

Source: cve@mitre.org

http://secunia.com/advisories/13989

Source: cve@mitre.org

http://securitytracker.com/id?1012972

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml

Source: cve@mitre.org

http://www.kde.org/info/security/advisory-20050121-1.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/12312

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/19008

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html