PT-2012-2402 · Debian · Devscripts

Paul Wise · Publicado 2012-06-16 · Atualizado 2017-08-29 · CVE-2012-0210

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions devscripts versions 2.10.x through 2.10.68 devscripts versions 2.11.x through 2.11.3

Description The issue allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.

Recommendations For devscripts versions 2.10.x through 2.10.68, update to version 2.10.69 or later. For devscripts versions 2.11.x through 2.11.3, update to version 2.11.4 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-0210

DSA-2409-1

Produtos afetados

Devscripts

Referências · 12

• https://osv.dev/vulnerability/CVE-2012-0210 · Aviso do Fabricante
• http://secunia.com/advisories/47955 · Aviso do Fabricante
• http://debian.org/security/2012/dsa-2409 · Aviso do Fabricante
• http://secunia.com/advisories/48039 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2012-0210 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73215 · Nota
• http://ubuntu.com/usn/usn-1366-1 · Aviso do Fabricante
• http://securityfocus.com/bid/52029 · Nota
• http://osvdb.org/79319 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0210 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0210 · Nota de Segurança
• http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=797ddc961532eb0aeb46153e3f28c8e9ea0500d2 · Nota