RSS   Podatności dla 'Devscripts'   RSS

2017-09-25
 
CVE-2015-5704

 
 
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.

 
2017-09-06
 
CVE-2015-5705

 
 
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.

 
2014-02-05
 
CVE-2014-1833

CWE-22
 
 
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.

 
2014-01-07
 
CVE-2013-6888

CWE-noinfo
 
 
Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

 
2013-12-14
 
CVE-2013-7085

CWE-20
 
 
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.

 
2013-12-13
 
CVE-2013-7050

CWE-94
 
 
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.

 
2012-09-30
 
CVE-2012-3500

CWE-362
 
 
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.

 
 
CVE-2012-2242

CWE-20
 
 
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.

 
 
CVE-2012-2241

 
 
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

 
 
CVE-2012-2240

CWE-287
 
 
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."

 

Copyright 2024, cxsecurity.com

 

Back to Top