[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

USN-847-2 -- devscripts vulnerability

ID: oval:org.secpod.oval:def:700470Date: (C)2011-05-13   (M)2021-07-09
Class: PATCHFamily: unix




USN-847-1 fixed vulnerabilities in devscripts. This update provides the corresponding updates for Ubuntu 6.06 LTS. Original advisory details: Raphael Geissert discovered that uscan, a part of devscripts, did not properly sanitize its input when processing pathnames. If uscan processed a crafted filename for a file on a remote server, an attacker could execute arbitrary code with the privileges of the user invoking the program.

Platform:
Ubuntu 6.06
Product:
devscripts
Reference:
USN-847-2
CVE-2009-2946
CVE    1
CVE-2009-2946
CPE    1
cpe:/o:ubuntu:ubuntu_linux:6.06

© SecPod Technologies