CVEvulnerability
CVE-2012-2240
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
Affected configurations
• devscripts devel team devscripts (<= 2.12.2)
• devscripts devel team devscripts 2.7.0
• devscripts devel team devscripts 2.8.14
• devscripts devel team devscripts 2.9.21
• devscripts devel team devscripts 2.9.22
• devscripts devel team devscripts 2.9.23
• devscripts devel team devscripts 2.9.24
• devscripts devel team devscripts 2.9.25
• devscripts devel team devscripts 2.9.26
• devscripts devel team devscripts 2.9.27
• devscripts devel team devscripts 2.10.0
• devscripts devel team devscripts 2.10.1
• devscripts devel team devscripts 2.10.3
• devscripts devel team devscripts 2.10.6
• devscripts devel team devscripts 2.10.7
• devscripts devel team devscripts 2.10.8
• devscripts devel team devscripts 2.10.9
• devscripts devel team devscripts 2.10.10
• devscripts devel team devscripts 2.10.11
• devscripts devel team devscripts 2.10.12
• devscripts devel team devscripts 2.10.13
• devscripts devel team devscripts 2.10.14
• devscripts devel team devscripts 2.10.15
• devscripts devel team devscripts 2.10.16
• devscripts devel team devscripts 2.10.17
• devscripts devel team devscripts 2.10.18
• devscripts devel team devscripts 2.10.18.1
• devscripts devel team devscripts 2.10.19
• devscripts devel team devscripts 2.10.20
• devscripts devel team devscripts 2.10.21
• devscripts devel team devscripts 2.10.22
• devscripts devel team devscripts 2.10.23
• devscripts devel team devscripts 2.10.24
• devscripts devel team devscripts 2.10.25
• devscripts devel team devscripts 2.10.26
• devscripts devel team devscripts 2.10.27
• devscripts devel team devscripts 2.10.28
• devscripts devel team devscripts 2.10.29
• devscripts devel team devscripts 2.10.30
• devscripts devel team devscripts 2.10.31
• devscripts devel team devscripts 2.10.32
• devscripts devel team devscripts 2.10.33
• devscripts devel team devscripts 2.10.34
• devscripts devel team devscripts 2.10.35
• devscripts devel team devscripts 2.10.36
• devscripts devel team devscripts 2.10.38
• devscripts devel team devscripts 2.10.39
• devscripts devel team devscripts 2.10.40
• devscripts devel team devscripts 2.10.41
• devscripts devel team devscripts 2.10.42
• devscripts devel team devscripts 2.10.43
• devscripts devel team devscripts 2.10.44
• devscripts devel team devscripts 2.10.45
• devscripts devel team devscripts 2.10.46
• devscripts devel team devscripts 2.10.47
• devscripts devel team devscripts 2.10.48
• devscripts devel team devscripts 2.10.49
• devscripts devel team devscripts 2.10.50
• devscripts devel team devscripts 2.10.51
• devscripts devel team devscripts 2.10.52
… and 28 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/50600 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2549 www.debian.org
- http://www.securityfocus.com/bid/55564 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1593-1 www.ubuntu.com
- http://secunia.com/advisories/50600 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2549 www.debian.org
- http://www.securityfocus.com/bid/55564 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1593-1 www.ubuntu.com