CVE-2012-0210

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.

Weaknesses (CWE)

CWE-20

Affected Products (70)

devscripts_devel_team · devscriptsvulnerable

...and 20 more

References (16)

http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2

http://secunia.com/advisories/47955

Vendor Advisory

http://secunia.com/advisories/48039

Vendor Advisory

http://ubuntu.com/usn/usn-1366-1

Vendor Advisory

http://www.debian.org/security/2012/dsa-2409

http://www.osvdb.org/79319

http://www.securityfocus.com/bid/52029

https://exchange.xforce.ibmcloud.com/vulnerabilities/73215

http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2

http://secunia.com/advisories/47955

Vendor Advisory

http://secunia.com/advisories/48039

Vendor Advisory

http://ubuntu.com/usn/usn-1366-1

Vendor Advisory

http://www.debian.org/security/2012/dsa-2409

http://www.osvdb.org/79319

http://www.securityfocus.com/bid/52029

https://exchange.xforce.ibmcloud.com/vulnerabilities/73215