CVEvulnerability
CVE-2009-2946
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.
Affected configurations
• devscripts devel team devscripts
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209 bugs.debian.org
- http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1 svn.debian.org
- http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0 svn.debian.org
- http://www.debian.org/security/2009/dsa-1878 www.debian.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209 bugs.debian.org
- http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1 svn.debian.org
- http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0 svn.debian.org
- http://www.debian.org/security/2009/dsa-1878 www.debian.org