[Forgot Password]
Login  Register Subscribe

23631

 
 

121832

 
 

98218

 
 

909

 
 

79224

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-0212

Date: (C)2012-06-15   (M)2017-11-18 


debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

CVSS Score: 9.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECUNIA-47955
SECUNIA-48039
BID-52029
OSVDB-79322
DSA-2409
USN-1366-1
USN-1593-1
devscripts-debdiff-code-execution(73217)
http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03

CWE    1
CWE-20
OVAL    3
oval:org.secpod.oval:def:600731
oval:org.secpod.oval:def:701020
oval:org.secpod.oval:def:700769

© 2013 SecPod Technologies