CVEvulnerability

CVE-2012-2242

6.8 MEDIUM Published 2012-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.

Affected configurations

• devscripts devel team devscripts (<= 2.10.72) • devscripts devel team devscripts 2.10.0 • devscripts devel team devscripts 2.10.1 • devscripts devel team devscripts 2.10.3 • devscripts devel team devscripts 2.10.6 • devscripts devel team devscripts 2.10.7 • devscripts devel team devscripts 2.10.8 • devscripts devel team devscripts 2.10.9 • devscripts devel team devscripts 2.10.10 • devscripts devel team devscripts 2.10.11 • devscripts devel team devscripts 2.10.12 • devscripts devel team devscripts 2.10.13 • devscripts devel team devscripts 2.10.14 • devscripts devel team devscripts 2.10.15 • devscripts devel team devscripts 2.10.16 • devscripts devel team devscripts 2.10.17 • devscripts devel team devscripts 2.10.18 • devscripts devel team devscripts 2.10.18.1 • devscripts devel team devscripts 2.10.19 • devscripts devel team devscripts 2.10.20 • devscripts devel team devscripts 2.10.21 • devscripts devel team devscripts 2.10.22 • devscripts devel team devscripts 2.10.23 • devscripts devel team devscripts 2.10.24 • devscripts devel team devscripts 2.10.25 • devscripts devel team devscripts 2.10.26 • devscripts devel team devscripts 2.10.27 • devscripts devel team devscripts 2.10.28 • devscripts devel team devscripts 2.10.29 • devscripts devel team devscripts 2.10.30 • devscripts devel team devscripts 2.10.31 • devscripts devel team devscripts 2.10.32 • devscripts devel team devscripts 2.10.33 • devscripts devel team devscripts 2.10.34 • devscripts devel team devscripts 2.10.35 • devscripts devel team devscripts 2.10.36 • devscripts devel team devscripts 2.10.38 • devscripts devel team devscripts 2.10.39 • devscripts devel team devscripts 2.10.40 • devscripts devel team devscripts 2.10.41 • devscripts devel team devscripts 2.10.42 • devscripts devel team devscripts 2.10.43 • devscripts devel team devscripts 2.10.44 • devscripts devel team devscripts 2.10.45 • devscripts devel team devscripts 2.10.46 • devscripts devel team devscripts 2.10.47 • devscripts devel team devscripts 2.10.48 • devscripts devel team devscripts 2.10.49 • devscripts devel team devscripts 2.10.50 • devscripts devel team devscripts 2.10.51 • devscripts devel team devscripts 2.10.52 • devscripts devel team devscripts 2.10.53 • devscripts devel team devscripts 2.10.54 • devscripts devel team devscripts 2.10.55 • devscripts devel team devscripts 2.10.56 • devscripts devel team devscripts 2.10.57 • devscripts devel team devscripts 2.10.58 • devscripts devel team devscripts 2.10.59 • devscripts devel team devscripts 2.10.60 • devscripts devel team devscripts 2.10.61 … and 10 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References