CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
81.4%
Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in
devscripts allows remote attackers to execute arbitrary Perl code via
crafted pathnames on distribution servers for upstream source code used in
Debian GNU/Linux packages.
Author | Note |
---|---|
mdeslaur | watch for regression fixed in dsa-1878-2: http://thread.gmane.org/gmane.comp.security.bugtraq/41022 |
jdstrand | lenny7 should have all fixes |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | devscripts | <ย 2.9.10-0ubuntu0.1 | UNKNOWN |
ubuntu | 8.04 | noarch | devscripts | <ย 2.10.11ubuntu5.8.04.4 | UNKNOWN |
ubuntu | 8.10 | noarch | devscripts | <ย 2.10.26ubuntu15.2 | UNKNOWN |
ubuntu | 9.04 | noarch | devscripts | <ย 2.10.39ubuntu7.1 | UNKNOWN |