CVEvulnerability

CVE-2012-2241

5.0 MEDIUM Published 2012-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

Affected configurations

• devscripts devel team devscripts (<= 2.12.2) • devscripts devel team devscripts 2.7.0 • devscripts devel team devscripts 2.8.14 • devscripts devel team devscripts 2.9.21 • devscripts devel team devscripts 2.9.22 • devscripts devel team devscripts 2.9.23 • devscripts devel team devscripts 2.9.24 • devscripts devel team devscripts 2.9.25 • devscripts devel team devscripts 2.9.26 • devscripts devel team devscripts 2.9.27 • devscripts devel team devscripts 2.10.0 • devscripts devel team devscripts 2.10.1 • devscripts devel team devscripts 2.10.3 • devscripts devel team devscripts 2.10.6 • devscripts devel team devscripts 2.10.7 • devscripts devel team devscripts 2.10.8 • devscripts devel team devscripts 2.10.9 • devscripts devel team devscripts 2.10.10 • devscripts devel team devscripts 2.10.11 • devscripts devel team devscripts 2.10.12 • devscripts devel team devscripts 2.10.13 • devscripts devel team devscripts 2.10.14 • devscripts devel team devscripts 2.10.15 • devscripts devel team devscripts 2.10.16 • devscripts devel team devscripts 2.10.17 • devscripts devel team devscripts 2.10.18 • devscripts devel team devscripts 2.10.18.1 • devscripts devel team devscripts 2.10.19 • devscripts devel team devscripts 2.10.20 • devscripts devel team devscripts 2.10.21 • devscripts devel team devscripts 2.10.22 • devscripts devel team devscripts 2.10.23 • devscripts devel team devscripts 2.10.24 • devscripts devel team devscripts 2.10.25 • devscripts devel team devscripts 2.10.26 • devscripts devel team devscripts 2.10.27 • devscripts devel team devscripts 2.10.28 • devscripts devel team devscripts 2.10.29 • devscripts devel team devscripts 2.10.30 • devscripts devel team devscripts 2.10.31 • devscripts devel team devscripts 2.10.32 • devscripts devel team devscripts 2.10.33 • devscripts devel team devscripts 2.10.34 • devscripts devel team devscripts 2.10.35 • devscripts devel team devscripts 2.10.36 • devscripts devel team devscripts 2.10.38 • devscripts devel team devscripts 2.10.39 • devscripts devel team devscripts 2.10.40 • devscripts devel team devscripts 2.10.41 • devscripts devel team devscripts 2.10.42 • devscripts devel team devscripts 2.10.43 • devscripts devel team devscripts 2.10.44 • devscripts devel team devscripts 2.10.45 • devscripts devel team devscripts 2.10.46 • devscripts devel team devscripts 2.10.47 • devscripts devel team devscripts 2.10.48 • devscripts devel team devscripts 2.10.49 • devscripts devel team devscripts 2.10.50 • devscripts devel team devscripts 2.10.51 • devscripts devel team devscripts 2.10.52 … and 28 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References