[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96078

 
 

909

 
 

78009

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-0212

Date: (C)2012-06-15   (M)2017-08-29
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

Reference:
SECUNIA-47955
SECUNIA-48039
BID-52029
OSVDB-79322
DSA-2409
USN-1366-1
USN-1593-1
devscripts-debdiff-code-execution(73217)
http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03

CWE    1
CWE-20
OVAL    3
oval:org.secpod.oval:def:700769
oval:org.secpod.oval:def:600731
oval:org.secpod.oval:def:701020

© 2013 SecPod Technologies