CVE-2013-7050

2013-12-1318:07:54

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.013

Percentile

85.8%

JSON

The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.

Affected configurations

Nvd

Node

devscripts_devel_teamdevscriptsRange≤2.13.7

devscripts_devel_teamdevscriptsMatch2.13.0

devscripts_devel_teamdevscriptsMatch2.13.1

devscripts_devel_teamdevscriptsMatch2.13.2

devscripts_devel_teamdevscriptsMatch2.13.3

devscripts_devel_teamdevscriptsMatch2.13.4

devscripts_devel_teamdevscriptsMatch2.13.5

devscripts_devel_teamdevscriptsMatch2.13.6

VendorProductVersionCPE
devscripts_devel_teamdevscripts*cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.0cpe:2.3:a:devscripts_devel_team:devscripts:2.13.0:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.1cpe:2.3:a:devscripts_devel_team:devscripts:2.13.1:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.2cpe:2.3:a:devscripts_devel_team:devscripts:2.13.2:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.3cpe:2.3:a:devscripts_devel_team:devscripts:2.13.3:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.4cpe:2.3:a:devscripts_devel_team:devscripts:2.13.4:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.5cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.6cpe:2.3:a:devscripts_devel_team:devscripts:2.13.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
devscripts_devel_team	devscripts	*	cpe:2.3:a:devscripts_devel_team:devscripts::::::::
devscripts_devel_team	devscripts	2.13.0	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.0:::::::*
devscripts_devel_team	devscripts	2.13.1	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.1:::::::*
devscripts_devel_team	devscripts	2.13.2	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.2:::::::*
devscripts_devel_team	devscripts	2.13.3	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.3:::::::*
devscripts_devel_team	devscripts	2.13.4	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.4:::::::*
devscripts_devel_team	devscripts	2.13.5	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:::::::*
devscripts_devel_team	devscripts	2.13.6	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.6:::::::*