CVE-2012-2241

devscripts < 2.12.3 - Arbitrary File Deletion via Crafted .dsc or .changes File

Title source: llm
STIX 2.1

Description

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55564
Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2549
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50600
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1593-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/78977

Scores

EPSS 0.0150
EPSS Percentile 71.4%

Details

CWE
CWE-20
Status published
Products (47)
devscripts_devel_team/devscripts 2.7.0
devscripts_devel_team/devscripts 2.8.14
devscripts_devel_team/devscripts 2.9.21
devscripts_devel_team/devscripts 2.9.22
devscripts_devel_team/devscripts 2.9.23
devscripts_devel_team/devscripts 2.9.24
devscripts_devel_team/devscripts 2.9.25
devscripts_devel_team/devscripts 2.9.26 etch1 (4 CPE variants)
devscripts_devel_team/devscripts 2.9.27
devscripts_devel_team/devscripts 2.10.0
... and 37 more
Published Oct 01, 2012
Tracked Since Feb 18, 2026