CVE-2012-2242 scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not...
MediumCVSS 6.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/devscripts(Debian:12) | < 2.12.3 | 2.12.3 |
| debian/devscripts(Debian:13) | < 2.12.3 | 2.12.3 |
| debian/devscripts(Debian:14) | < 2.12.3 | 2.12.3 |
| devscripts devel team devscripts | <= 2.10.72 | No fix listed |
| devscripts devel team devscripts | = 2.10.0 | No fix listed |
| devscripts devel team devscripts | = 2.10.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.3 | No fix listed |
| devscripts devel team devscripts | = 2.10.6 | No fix listed |
| devscripts devel team devscripts | = 2.10.7 | No fix listed |
| devscripts devel team devscripts | = 2.10.8 | No fix listed |
| devscripts devel team devscripts | = 2.10.9 | No fix listed |
| devscripts devel team devscripts | = 2.10.10 | No fix listed |
| devscripts devel team devscripts | = 2.10.11 | No fix listed |
| devscripts devel team devscripts | = 2.10.12 | No fix listed |
| devscripts devel team devscripts | = 2.10.13 | No fix listed |
| devscripts devel team devscripts | = 2.10.14 | No fix listed |
| devscripts devel team devscripts | = 2.10.15 | No fix listed |
| devscripts devel team devscripts | = 2.10.16 | No fix listed |
| devscripts devel team devscripts | = 2.10.17 | No fix listed |
| devscripts devel team devscripts | = 2.10.18 | No fix listed |
| devscripts devel team devscripts | = 2.10.18.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.19 | No fix listed |
| devscripts devel team devscripts | = 2.10.20 | No fix listed |
| devscripts devel team devscripts | = 2.10.21 | No fix listed |
| devscripts devel team devscripts | = 2.10.22 | No fix listed |
Show 52 more
| Product | Affected versions | Fixed in |
|---|---|---|
| devscripts devel team devscripts | = 2.10.23 | No fix listed |
| devscripts devel team devscripts | = 2.10.24 | No fix listed |
| devscripts devel team devscripts | = 2.10.25 | No fix listed |
| devscripts devel team devscripts | = 2.10.26 | No fix listed |
| devscripts devel team devscripts | = 2.10.27 | No fix listed |
| devscripts devel team devscripts | = 2.10.28 | No fix listed |
| devscripts devel team devscripts | = 2.10.29 | No fix listed |
| devscripts devel team devscripts | = 2.10.30 | No fix listed |
| devscripts devel team devscripts | = 2.10.31 | No fix listed |
| devscripts devel team devscripts | = 2.10.32 | No fix listed |
| devscripts devel team devscripts | = 2.10.33 | No fix listed |
| devscripts devel team devscripts | = 2.10.34 | No fix listed |
| devscripts devel team devscripts | = 2.10.35 | No fix listed |
| devscripts devel team devscripts | = 2.10.36 | No fix listed |
| devscripts devel team devscripts | = 2.10.38 | No fix listed |
| devscripts devel team devscripts | = 2.10.39 | No fix listed |
| devscripts devel team devscripts | = 2.10.40 | No fix listed |
| devscripts devel team devscripts | = 2.10.41 | No fix listed |
| devscripts devel team devscripts | = 2.10.42 | No fix listed |
| devscripts devel team devscripts | = 2.10.43 | No fix listed |
| devscripts devel team devscripts | = 2.10.44 | No fix listed |
| devscripts devel team devscripts | = 2.10.45 | No fix listed |
| devscripts devel team devscripts | = 2.10.46 | No fix listed |
| devscripts devel team devscripts | = 2.10.47 | No fix listed |
| devscripts devel team devscripts | = 2.10.48 | No fix listed |
| devscripts devel team devscripts | = 2.10.49 | No fix listed |
| devscripts devel team devscripts | = 2.10.50 | No fix listed |
| devscripts devel team devscripts | = 2.10.51 | No fix listed |
| devscripts devel team devscripts | = 2.10.52 | No fix listed |
| devscripts devel team devscripts | = 2.10.53 | No fix listed |
| devscripts devel team devscripts | = 2.10.54 | No fix listed |
| devscripts devel team devscripts | = 2.10.55 | No fix listed |
| devscripts devel team devscripts | = 2.10.56 | No fix listed |
| devscripts devel team devscripts | = 2.10.57 | No fix listed |
| devscripts devel team devscripts | = 2.10.58 | No fix listed |
| devscripts devel team devscripts | = 2.10.59 | No fix listed |
| devscripts devel team devscripts | = 2.10.60 | No fix listed |
| devscripts devel team devscripts | = 2.10.61 | No fix listed |
| devscripts devel team devscripts | = 2.10.62 | No fix listed |
| devscripts devel team devscripts | = 2.10.63 | No fix listed |
| devscripts devel team devscripts | = 2.10.64 | No fix listed |
| devscripts devel team devscripts | = 2.10.65.1 | No fix listed |
| devscripts devel team devscripts | = 2.10.66 | No fix listed |
| devscripts devel team devscripts | = 2.10.67 | No fix listed |
| devscripts devel team devscripts | = 2.10.68 | No fix listed |
| devscripts devel team devscripts | = 2.10.69 | No fix listed |
| devscripts devel team devscripts | = 2.10.69-squeeze1 | No fix listed |
| devscripts devel team devscripts | = 2.10.69-squeeze2 | No fix listed |
| devscripts devel team devscripts | = 2.10.69-squeeze3 | No fix listed |
| devscripts devel team devscripts | = 2.10.69-squeeze4 | No fix listed |
| devscripts devel team devscripts | = 2.10.70 | No fix listed |
| devscripts devel team devscripts | = 2.10.71 | No fix listed |
References
- Debian Security Tracker CVE-2012-2242 vendor-advisory
- 50600 third-party-advisory vendor-advisory
- DSA-2549 vendor-advisory
- 55564 vdb-entry
- USN-1593-1 vendor-advisory