CVE-2012-1095

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2014
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-10965.5NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file patCVE-2012-10977.8The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, whichCVE-2012-10984.3Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attaCVE-2012-10994.3Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails CVE-2012-11005.8Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind accountCVE-2012-11015.5systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).CVE-2012-11027.5It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untCVE-2012-11034.3emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary filesCVE-2012-11045.3A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.CVE-2012-11055.5An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central AuthenticaCVE-2012-11061.9The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions CVE-2012-11074.3The analyzeCurrent function in ape/apeproperties.cpp in TagLib 1.7 and earlier allows context-dependent attackers to cause a denial of servi
CVE-2012-1095: Medium severity, CVSS 4.3 | Vulnix