Lucene search
HistoryOct 01, 2012 - 12:55 a.m.
CVE-2012-2242
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.1%
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to “arguments to external commands” that are not properly escaped, a different vulnerability than CVE-2012-2240.
Affected configurations
Node
devscripts_devel_teamdevscriptsRange≤2.10.72
ORdevscripts_devel_teamdevscriptsMatch2.10.0
ORdevscripts_devel_teamdevscriptsMatch2.10.1
ORdevscripts_devel_teamdevscriptsMatch2.10.3
ORdevscripts_devel_teamdevscriptsMatch2.10.6
ORdevscripts_devel_teamdevscriptsMatch2.10.7
ORdevscripts_devel_teamdevscriptsMatch2.10.8
ORdevscripts_devel_teamdevscriptsMatch2.10.9
ORdevscripts_devel_teamdevscriptsMatch2.10.10
ORdevscripts_devel_teamdevscriptsMatch2.10.11
ORdevscripts_devel_teamdevscriptsMatch2.10.12
ORdevscripts_devel_teamdevscriptsMatch2.10.13
ORdevscripts_devel_teamdevscriptsMatch2.10.14
ORdevscripts_devel_teamdevscriptsMatch2.10.15
ORdevscripts_devel_teamdevscriptsMatch2.10.16
ORdevscripts_devel_teamdevscriptsMatch2.10.17
ORdevscripts_devel_teamdevscriptsMatch2.10.18
ORdevscripts_devel_teamdevscriptsMatch2.10.18.1
ORdevscripts_devel_teamdevscriptsMatch2.10.19
ORdevscripts_devel_teamdevscriptsMatch2.10.20
ORdevscripts_devel_teamdevscriptsMatch2.10.21
ORdevscripts_devel_teamdevscriptsMatch2.10.22
ORdevscripts_devel_teamdevscriptsMatch2.10.23
ORdevscripts_devel_teamdevscriptsMatch2.10.24
ORdevscripts_devel_teamdevscriptsMatch2.10.25
ORdevscripts_devel_teamdevscriptsMatch2.10.26
ORdevscripts_devel_teamdevscriptsMatch2.10.27
ORdevscripts_devel_teamdevscriptsMatch2.10.28
ORdevscripts_devel_teamdevscriptsMatch2.10.29
ORdevscripts_devel_teamdevscriptsMatch2.10.30
ORdevscripts_devel_teamdevscriptsMatch2.10.31
ORdevscripts_devel_teamdevscriptsMatch2.10.32
ORdevscripts_devel_teamdevscriptsMatch2.10.33
ORdevscripts_devel_teamdevscriptsMatch2.10.34
ORdevscripts_devel_teamdevscriptsMatch2.10.35
ORdevscripts_devel_teamdevscriptsMatch2.10.36
ORdevscripts_devel_teamdevscriptsMatch2.10.38
ORdevscripts_devel_teamdevscriptsMatch2.10.39
ORdevscripts_devel_teamdevscriptsMatch2.10.40
ORdevscripts_devel_teamdevscriptsMatch2.10.41
ORdevscripts_devel_teamdevscriptsMatch2.10.42
ORdevscripts_devel_teamdevscriptsMatch2.10.43
ORdevscripts_devel_teamdevscriptsMatch2.10.44
ORdevscripts_devel_teamdevscriptsMatch2.10.45
ORdevscripts_devel_teamdevscriptsMatch2.10.46
ORdevscripts_devel_teamdevscriptsMatch2.10.47
ORdevscripts_devel_teamdevscriptsMatch2.10.48
ORdevscripts_devel_teamdevscriptsMatch2.10.49
ORdevscripts_devel_teamdevscriptsMatch2.10.50
ORdevscripts_devel_teamdevscriptsMatch2.10.51
ORdevscripts_devel_teamdevscriptsMatch2.10.52
ORdevscripts_devel_teamdevscriptsMatch2.10.53
ORdevscripts_devel_teamdevscriptsMatch2.10.54
ORdevscripts_devel_teamdevscriptsMatch2.10.55
ORdevscripts_devel_teamdevscriptsMatch2.10.56
ORdevscripts_devel_teamdevscriptsMatch2.10.57
ORdevscripts_devel_teamdevscriptsMatch2.10.58
ORdevscripts_devel_teamdevscriptsMatch2.10.59
ORdevscripts_devel_teamdevscriptsMatch2.10.60
ORdevscripts_devel_teamdevscriptsMatch2.10.61
ORdevscripts_devel_teamdevscriptsMatch2.10.62
ORdevscripts_devel_teamdevscriptsMatch2.10.63
ORdevscripts_devel_teamdevscriptsMatch2.10.64
ORdevscripts_devel_teamdevscriptsMatch2.10.65.1
ORdevscripts_devel_teamdevscriptsMatch2.10.66
ORdevscripts_devel_teamdevscriptsMatch2.10.67
ORdevscripts_devel_teamdevscriptsMatch2.10.68
ORdevscripts_devel_teamdevscriptsMatch2.10.69
ORdevscripts_devel_teamdevscriptsMatch2.10.69squeeze1
ORdevscripts_devel_teamdevscriptsMatch2.10.69squeeze2
ORdevscripts_devel_teamdevscriptsMatch2.10.69squeeze3
ORdevscripts_devel_teamdevscriptsMatch2.10.69squeeze4
ORdevscripts_devel_teamdevscriptsMatch2.10.70
ORdevscripts_devel_teamdevscriptsMatch2.10.71
Related
cve
cve
CVE-2012-2242
2012-10-01 00:55:01
CVE-2012-2240
2012-10-01 00:55:01
ubuntucve
ubuntucve
CVE-2012-2242
2012-09-15 00:00:00
CVE-2012-2240
2012-09-15 00:00:00
cvelist
cvelist
CVE-2012-2242
2012-10-01 00:00:00
CVE-2012-2240
2012-10-01 00:00:00
debiancve
debiancve
CVE-2012-2242
2012-10-01 00:55:01
CVE-2012-2240
2012-10-01 00:55:01
nessus
nessus
Debian DSA-2549-1 : devscripts - multiple vulnerabilities
2012-09-17 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2549-1)
2012-09-19 00:00:00
Debian Security Advisory DSA 2549-1 (devscripts)
2012-09-19 00:00:00
Ubuntu Update for devscripts USN-1593-1
2012-10-03 00:00:00
osv
osv
devscripts - multiple
2012-09-15 00:00:00
debian
debian
[SECURITY] [DSA 2549-1] devscripts security update
2012-09-15 18:09:17
ubuntu
ubuntu
devscripts vulnerabilities
2012-10-02 00:00:00
nvd
nvd
CVE-2012-2240
2012-10-01 00:55:01
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
81.1%
Related for NVD:CVE-2012-2242