CVE-2012-0210

devscripts 2.10.x-2.10.69 and 2.11.x-2.11.4 - Remote Code Execution via File Name in .dsc or .changes File

Title source: llm
STIX 2.1

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47955
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48039
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/52029
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-1366-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/79319
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/73215
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2409

Scores

EPSS 0.0527
EPSS Percentile 91.6%

Details

CWE
CWE-20
Status published
Products (50)
devscripts_devel_team/devscripts 2.10.0
devscripts_devel_team/devscripts 2.10.1
devscripts_devel_team/devscripts 2.10.3
devscripts_devel_team/devscripts 2.10.6
devscripts_devel_team/devscripts 2.10.7
devscripts_devel_team/devscripts 2.10.8
devscripts_devel_team/devscripts 2.10.9
devscripts_devel_team/devscripts 2.10.10
devscripts_devel_team/devscripts 2.10.11
devscripts_devel_team/devscripts 2.10.12
... and 40 more
Published Jun 16, 2012
Tracked Since Feb 18, 2026