Lucene search

K
cveMitreCVE-2009-2946
HistorySep 04, 2009 - 8:30 p.m.

CVE-2009-2946

2009-09-0420:30:00
mitre
web.nvd.nist.gov
45
cve-2009-2946
eval injection
uscan.pl
devscripts
remote code execution
debian
linux
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.008

Percentile

81.4%

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Affected configurations

Nvd
Node
devscripts_devel_teamdevscripts
AND
debianlinux
VendorProductVersionCPE
devscripts_devel_teamdevscripts*cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*
debianlinux*cpe:2.3:o:debian:linux:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.008

Percentile

81.4%