CVE-2012-2085

Published: 28 August 2012

The exec_command function in common/helpers.py in Gajim before 0.15 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an href attribute.

Priority

Status

Package	Release	Status
gajim Launchpad, Ubuntu, Debian	hardy	Ignored (end of life)
	lucid	Released (0.13-0ubuntu2.1)
	maverick	Ignored (end of life)
	natty	Released (0.13.4-3ubuntu2.1)
	oneiric	Released (0.14.1-1ubuntu1.1)
	precise	Released (0.15-1)
	upstream	Released (0.15-1)

References

https://www.cve.org/CVERecord?id=CVE-2012-2085
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668038
https://trac.gajim.org/ticket/7031
https://bugs.launchpad.net/ubuntu/+source/gajim/+bug/984616

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›