← Back

CVE-2012-2241

nvd nist
Published: Oct 1, 2012Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

Affected (91)

Devscripts
Configuration A
91 vulnerable
Vulnerable SoftwareAffected Versions
Up to 2.12.2
Version 2.10.0
Version 2.10.10
Version 2.10.11
Version 2.10.12
Version 2.10.13
Version 2.10.14
Version 2.10.15
Version 2.10.16
Version 2.10.17
Version 2.10.18.1
Version 2.10.18
Version 2.10.19
Version 2.10.1
Version 2.10.20
Version 2.10.21
Version 2.10.22
Version 2.10.23
Version 2.10.24
Version 2.10.25
Version 2.10.26
Version 2.10.27
Version 2.10.28
Version 2.10.29
Version 2.10.30
Version 2.10.31
Version 2.10.32
Version 2.10.33
Version 2.10.34
Version 2.10.35
Version 2.10.36
Version 2.10.38
Version 2.10.39
Version 2.10.3
Version 2.10.40
Version 2.10.41
Version 2.10.42
Version 2.10.43
Version 2.10.44
Version 2.10.45
Version 2.10.46
Version 2.10.47
Version 2.10.48
Version 2.10.49
Version 2.10.50
Version 2.10.51
Version 2.10.52
Version 2.10.53
Version 2.10.54
Version 2.10.55
Version 2.10.56
Version 2.10.57
Version 2.10.58
Version 2.10.59
Version 2.10.60
Version 2.10.61
Version 2.10.62
Version 2.10.63
Version 2.10.64
Version 2.10.65.1
Version 2.10.66
Version 2.10.67
Version 2.10.68
Version 2.10.6
Version 2.10.7
Version 2.10.8
Version 2.10.9
Version 2.11.0
Version 2.11.1
Version 2.11.2
Version 2.11.3
Version 2.11.4
Version 2.11.5
Version 2.11.6
Version 2.11.7
Version 2.11.8
Version 2.11.9
Version 2.12.0
Version 2.12.1
Version 2.7.0
Version 2.8.14
Version 2.9.21
Version 2.9.22
Version 2.9.23
Version 2.9.24
Version 2.9.25
Version 2.9.26 etch1
Version 2.9.26 etch2
Version 2.9.26 etch4
Version 2.9.26 etch5
Version 2.9.27

References (12)

Source: security@debian.org
Vendor Advisory
Source: security@debian.org
Vendor Advisory
Source: security@debian.org
Source: security@debian.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.