CVE-2013-6888

2014-01-0717:04:52

mitre

web.nvd.nist.gov

cve-2013-6888

uscan

devscripts

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

High

EPSS

0.105

Percentile

95.0%

JSON

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

Affected configurations

Nvd

Node

devscripts_devel_teamdevscriptsRange≤2.13.8

devscripts_devel_teamdevscriptsMatch2.13.0

devscripts_devel_teamdevscriptsMatch2.13.1

devscripts_devel_teamdevscriptsMatch2.13.2

devscripts_devel_teamdevscriptsMatch2.13.3

devscripts_devel_teamdevscriptsMatch2.13.4

devscripts_devel_teamdevscriptsMatch2.13.5

devscripts_devel_teamdevscriptsMatch2.13.6

devscripts_devel_teamdevscriptsMatch2.13.7

VendorProductVersionCPE
devscripts_devel_teamdevscripts*cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.0cpe:2.3:a:devscripts_devel_team:devscripts:2.13.0:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.1cpe:2.3:a:devscripts_devel_team:devscripts:2.13.1:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.2cpe:2.3:a:devscripts_devel_team:devscripts:2.13.2:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.3cpe:2.3:a:devscripts_devel_team:devscripts:2.13.3:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.4cpe:2.3:a:devscripts_devel_team:devscripts:2.13.4:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.5cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.6cpe:2.3:a:devscripts_devel_team:devscripts:2.13.6:*:*:*:*:*:*:*
devscripts_devel_teamdevscripts2.13.7cpe:2.3:a:devscripts_devel_team:devscripts:2.13.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
devscripts_devel_team	devscripts	*	cpe:2.3:a:devscripts_devel_team:devscripts::::::::
devscripts_devel_team	devscripts	2.13.0	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.0:::::::*
devscripts_devel_team	devscripts	2.13.1	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.1:::::::*
devscripts_devel_team	devscripts	2.13.2	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.2:::::::*
devscripts_devel_team	devscripts	2.13.3	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.3:::::::*
devscripts_devel_team	devscripts	2.13.4	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.4:::::::*
devscripts_devel_team	devscripts	2.13.5	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:::::::*
devscripts_devel_team	devscripts	2.13.6	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.6:::::::*
devscripts_devel_team	devscripts	2.13.7	cpe:2.3:a:devscripts_devel_team:devscripts:2.13.7:::::::*