CVE-2012-0212

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

Weaknesses (CWE)

CWE-20

Affected Products (70)

devscripts_devel_team · devscriptsvulnerable

...and 20 more

References (18)

http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03

http://secunia.com/advisories/47955

Vendor Advisory

http://secunia.com/advisories/48039

Vendor Advisory

http://ubuntu.com/usn/usn-1366-1

http://www.debian.org/security/2012/dsa-2409

http://www.osvdb.org/79322

http://www.securityfocus.com/bid/52029

http://www.ubuntu.com/usn/USN-1593-1

https://exchange.xforce.ibmcloud.com/vulnerabilities/73217

http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03

http://secunia.com/advisories/47955

Vendor Advisory

http://secunia.com/advisories/48039

Vendor Advisory

http://ubuntu.com/usn/usn-1366-1

http://www.debian.org/security/2012/dsa-2409

http://www.osvdb.org/79322

http://www.securityfocus.com/bid/52029

http://www.ubuntu.com/usn/USN-1593-1

https://exchange.xforce.ibmcloud.com/vulnerabilities/73217