CVE-2012-2240

devscripts < 2.12.3 - Remote Code Execution via External Command Arguments

Title source: llm
STIX 2.1

Description

scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55564
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2549
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50600
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1593-1

Scores

EPSS 0.0315
EPSS Percentile 86.4%

Details

CWE
CWE-20
Status published
Products (47)
devscripts_devel_team/devscripts 2.7.0
devscripts_devel_team/devscripts 2.8.14
devscripts_devel_team/devscripts 2.9.21
devscripts_devel_team/devscripts 2.9.22
devscripts_devel_team/devscripts 2.9.23
devscripts_devel_team/devscripts 2.9.24
devscripts_devel_team/devscripts 2.9.25
devscripts_devel_team/devscripts 2.9.26 etch1 (4 CPE variants)
devscripts_devel_team/devscripts 2.9.27
devscripts_devel_team/devscripts 2.10.0
... and 37 more
Published Oct 01, 2012
Tracked Since Feb 18, 2026