CVE-2012-0212 debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/devscripts(Debian:12) | < 2.11.4 | 2.11.4 |
| debian/devscripts(Debian:13) | < 2.11.4 | 2.11.4 |
| debian/devscripts(Debian:14) | < 2.11.4 | 2.11.4 |
| devscripts devel team devscripts | = 2.10.0 | No fix listed |
| devscripts devel team devscripts | = 2.10.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.3 | No fix listed |
| devscripts devel team devscripts | = 2.10.6 | No fix listed |
| devscripts devel team devscripts | = 2.10.7 | No fix listed |
| devscripts devel team devscripts | = 2.10.8 | No fix listed |
| devscripts devel team devscripts | = 2.10.9 | No fix listed |
| devscripts devel team devscripts | = 2.10.10 | No fix listed |
| devscripts devel team devscripts | = 2.10.11 | No fix listed |
| devscripts devel team devscripts | = 2.10.12 | No fix listed |
| devscripts devel team devscripts | = 2.10.13 | No fix listed |
| devscripts devel team devscripts | = 2.10.14 | No fix listed |
| devscripts devel team devscripts | = 2.10.15 | No fix listed |
| devscripts devel team devscripts | = 2.10.16 | No fix listed |
| devscripts devel team devscripts | = 2.10.17 | No fix listed |
| devscripts devel team devscripts | = 2.10.18 | No fix listed |
| devscripts devel team devscripts | = 2.10.18.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.19 | No fix listed |
| devscripts devel team devscripts | = 2.10.20 | No fix listed |
| devscripts devel team devscripts | = 2.10.21 | No fix listed |
| devscripts devel team devscripts | = 2.10.22 | No fix listed |
| devscripts devel team devscripts | = 2.10.23 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| devscripts devel team devscripts | = 2.10.24 | No fix listed |
| devscripts devel team devscripts | = 2.10.25 | No fix listed |
| devscripts devel team devscripts | = 2.10.26 | No fix listed |
| devscripts devel team devscripts | = 2.10.27 | No fix listed |
| devscripts devel team devscripts | = 2.10.28 | No fix listed |
| devscripts devel team devscripts | = 2.10.29 | No fix listed |
| devscripts devel team devscripts | = 2.10.30 | No fix listed |
| devscripts devel team devscripts | = 2.10.31 | No fix listed |
| devscripts devel team devscripts | = 2.10.32 | No fix listed |
| devscripts devel team devscripts | = 2.10.33 | No fix listed |
| devscripts devel team devscripts | = 2.10.34 | No fix listed |
| devscripts devel team devscripts | = 2.10.35 | No fix listed |
| devscripts devel team devscripts | = 2.10.36 | No fix listed |
| devscripts devel team devscripts | = 2.10.38 | No fix listed |
| devscripts devel team devscripts | = 2.10.39 | No fix listed |
| devscripts devel team devscripts | = 2.10.40 | No fix listed |
| devscripts devel team devscripts | = 2.10.41 | No fix listed |
| devscripts devel team devscripts | = 2.10.42 | No fix listed |
| devscripts devel team devscripts | = 2.10.43 | No fix listed |
| devscripts devel team devscripts | = 2.10.44 | No fix listed |
| devscripts devel team devscripts | = 2.10.45 | No fix listed |
| devscripts devel team devscripts | = 2.10.46 | No fix listed |
| devscripts devel team devscripts | = 2.10.47 | No fix listed |
| devscripts devel team devscripts | = 2.10.48 | No fix listed |
| devscripts devel team devscripts | = 2.10.49 | No fix listed |
| devscripts devel team devscripts | = 2.10.50 | No fix listed |
| devscripts devel team devscripts | = 2.10.51 | No fix listed |
| devscripts devel team devscripts | = 2.10.52 | No fix listed |
| devscripts devel team devscripts | = 2.10.53 | No fix listed |
| devscripts devel team devscripts | = 2.10.54 | No fix listed |
| devscripts devel team devscripts | = 2.10.55 | No fix listed |
| devscripts devel team devscripts | = 2.10.56 | No fix listed |
| devscripts devel team devscripts | = 2.10.57 | No fix listed |
| devscripts devel team devscripts | = 2.10.58 | No fix listed |
| devscripts devel team devscripts | = 2.10.59 | No fix listed |
| devscripts devel team devscripts | = 2.10.60 | No fix listed |
| devscripts devel team devscripts | = 2.10.61 | No fix listed |
| devscripts devel team devscripts | = 2.10.62 | No fix listed |
| devscripts devel team devscripts | = 2.10.63 | No fix listed |
| devscripts devel team devscripts | = 2.10.64 | No fix listed |
| devscripts devel team devscripts | = 2.10.65.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.66 | No fix listed |
| devscripts devel team devscripts | = 2.10.67 | No fix listed |
| devscripts devel team devscripts | = 2.10.68 | No fix listed |
| devscripts devel team devscripts | = 2.11.0 | No fix listed |
| devscripts devel team devscripts | = 2.11.1 | No fix listed |
| devscripts devel team devscripts | = 2.11.2 | No fix listed |
| devscripts devel team devscripts | = 2.11.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-0212 vendor-advisory
- anonscm.debian.org
- 47955 third-party-advisory vendor-advisory
- 48039 third-party-advisory vendor-advisory
- USN-1366-1 vendor-advisory
- DSA-2409 vendor-advisory
- 79322 vdb-entry
- 52029 vdb-entry
- USN-1593-1 vendor-advisory
- devscripts-debdiff-code-execution(73217) vdb-entry