Launchpad CVE tracker

CVE 2012-2086

SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.

Related bugs and status

CVE-2012-2086 (Candidate) is related to these bugs:

Bug #992613: gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support

		In	Importance	Status
992613	gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support	gajim (Ubuntu)	Undecided	Won't Fix
992613	gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support	gajim (Debian)	Unknown	Fix Released
992613	gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support	gajim (Ubuntu Lucid)	Medium	Fix Released
992613	gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support	gajim (Ubuntu Natty)	Low	Fix Released
992613	gajim: CVE-2012-2093 insecure temporary file creation in LaTeX support	gajim (Ubuntu Oneiric)	Low	Fix Released

Bug #992618: gajim code execution and sql injection

		In	Importance	Status
992618	gajim code execution and sql injection	gajim (Ubuntu)	Undecided	Fix Released
992618	gajim code execution and sql injection	gajim (Debian)	Unknown	Fix Released
992618	gajim code execution and sql injection	gajim (Ubuntu Lucid)	Medium	Fix Released
992618	gajim code execution and sql injection	gajim (Ubuntu Natty)	Medium	Fix Released
992618	gajim code execution and sql injection	gajim (Ubuntu Oneiric)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2012-2086

References