CVEvulnerability

CVE-2012-0211

9.3 HIGH Published 2012-06-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-06-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.

Affected configurations

• devscripts devel team devscripts 2.10.0 • devscripts devel team devscripts 2.10.1 • devscripts devel team devscripts 2.10.3 • devscripts devel team devscripts 2.10.6 • devscripts devel team devscripts 2.10.7 • devscripts devel team devscripts 2.10.8 • devscripts devel team devscripts 2.10.9 • devscripts devel team devscripts 2.10.10 • devscripts devel team devscripts 2.10.11 • devscripts devel team devscripts 2.10.12 • devscripts devel team devscripts 2.10.13 • devscripts devel team devscripts 2.10.14 • devscripts devel team devscripts 2.10.15 • devscripts devel team devscripts 2.10.16 • devscripts devel team devscripts 2.10.17 • devscripts devel team devscripts 2.10.18 • devscripts devel team devscripts 2.10.18.1 • devscripts devel team devscripts 2.10.19 • devscripts devel team devscripts 2.10.20 • devscripts devel team devscripts 2.10.21 • devscripts devel team devscripts 2.10.22 • devscripts devel team devscripts 2.10.23 • devscripts devel team devscripts 2.10.24 • devscripts devel team devscripts 2.10.25 • devscripts devel team devscripts 2.10.26 • devscripts devel team devscripts 2.10.27 • devscripts devel team devscripts 2.10.28 • devscripts devel team devscripts 2.10.29 • devscripts devel team devscripts 2.10.30 • devscripts devel team devscripts 2.10.31 • devscripts devel team devscripts 2.10.32 • devscripts devel team devscripts 2.10.33 • devscripts devel team devscripts 2.10.34 • devscripts devel team devscripts 2.10.35 • devscripts devel team devscripts 2.10.36 • devscripts devel team devscripts 2.10.38 • devscripts devel team devscripts 2.10.39 • devscripts devel team devscripts 2.10.40 • devscripts devel team devscripts 2.10.41 • devscripts devel team devscripts 2.10.42 • devscripts devel team devscripts 2.10.43 • devscripts devel team devscripts 2.10.44 • devscripts devel team devscripts 2.10.45 • devscripts devel team devscripts 2.10.46 • devscripts devel team devscripts 2.10.47 • devscripts devel team devscripts 2.10.48 • devscripts devel team devscripts 2.10.49 • devscripts devel team devscripts 2.10.50 • devscripts devel team devscripts 2.10.51 • devscripts devel team devscripts 2.10.52 • devscripts devel team devscripts 2.10.53 • devscripts devel team devscripts 2.10.54 • devscripts devel team devscripts 2.10.55 • devscripts devel team devscripts 2.10.56 • devscripts devel team devscripts 2.10.57 • devscripts devel team devscripts 2.10.58 • devscripts devel team devscripts 2.10.59 • devscripts devel team devscripts 2.10.60 • devscripts devel team devscripts 2.10.61 • devscripts devel team devscripts 2.10.62 … and 10 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References