Lucene search

K
ubuntuUbuntuUSN-847-2
HistoryOct 09, 2009 - 12:00 a.m.

devscripts vulnerability

2009-10-0900:00:00
ubuntu.com
35

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.9%

Releases

  • Ubuntu 6.06

Packages

  • devscripts -

Details

USN-847-1 fixed vulnerabilities in devscripts. This update provides the
corresponding updates for Ubuntu 6.06 LTS.

Original advisory details:

Raphael Geissert discovered that uscan, a part of devscripts, did not
properly sanitize its input when processing pathnames. If uscan processed a
crafted filename for a file on a remote server, an attacker could execute
arbitrary code with the privileges of the user invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.06noarchdevscripts<ย 2.9.10-0ubuntu0.1UNKNOWN

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.9%