CVE-2012-0210: Input Validation
Published Jun 16, 2012
·Updated
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.
Affected Software
70 affected components
Devscripts Devel Team Devscripts=2.10.0
Devscripts Devel Team Devscripts=2.10.1
Devscripts Devel Team Devscripts=2.10.3
Devscripts Devel Team Devscripts=2.10.6
Devscripts Devel Team Devscripts=2.10.7
Devscripts Devel Team Devscripts=2.10.8
Devscripts Devel Team Devscripts=2.10.9
Devscripts Devel Team Devscripts=2.10.10
Devscripts Devel Team Devscripts=2.10.11
Devscripts Devel Team Devscripts=2.10.12
Devscripts Devel Team Devscripts=2.10.13
Devscripts Devel Team Devscripts=2.10.14
Devscripts Devel Team Devscripts=2.10.15
Devscripts Devel Team Devscripts=2.10.16
Devscripts Devel Team Devscripts=2.10.17
Devscripts Devel Team Devscripts=2.10.18
Devscripts Devel Team Devscripts=2.10.18.1
Devscripts Devel Team Devscripts=2.10.19
Devscripts Devel Team Devscripts=2.10.20
Devscripts Devel Team Devscripts=2.10.21
Devscripts Devel Team Devscripts=2.10.22
Devscripts Devel Team Devscripts=2.10.23
Devscripts Devel Team Devscripts=2.10.24
Devscripts Devel Team Devscripts=2.10.25
Devscripts Devel Team Devscripts=2.10.26
Devscripts Devel Team Devscripts=2.10.27
Devscripts Devel Team Devscripts=2.10.28
Devscripts Devel Team Devscripts=2.10.29
Devscripts Devel Team Devscripts=2.10.30
Devscripts Devel Team Devscripts=2.10.31
Devscripts Devel Team Devscripts=2.10.32
Devscripts Devel Team Devscripts=2.10.33
Devscripts Devel Team Devscripts=2.10.34
Devscripts Devel Team Devscripts=2.10.35
Devscripts Devel Team Devscripts=2.10.36
Devscripts Devel Team Devscripts=2.10.38
Devscripts Devel Team Devscripts=2.10.39
Devscripts Devel Team Devscripts=2.10.40
Devscripts Devel Team Devscripts=2.10.41
Devscripts Devel Team Devscripts=2.10.42
Devscripts Devel Team Devscripts=2.10.43
Devscripts Devel Team Devscripts=2.10.44
Devscripts Devel Team Devscripts=2.10.45
Devscripts Devel Team Devscripts=2.10.46
Devscripts Devel Team Devscripts=2.10.47
Devscripts Devel Team Devscripts=2.10.48
Devscripts Devel Team Devscripts=2.10.49
Devscripts Devel Team Devscripts=2.10.50
Devscripts Devel Team Devscripts=2.10.51
Devscripts Devel Team Devscripts=2.10.52
Devscripts Devel Team Devscripts=2.10.53
Devscripts Devel Team Devscripts=2.10.54
Devscripts Devel Team Devscripts=2.10.55
Devscripts Devel Team Devscripts=2.10.56
Devscripts Devel Team Devscripts=2.10.57
Devscripts Devel Team Devscripts=2.10.58
Devscripts Devel Team Devscripts=2.10.59
Devscripts Devel Team Devscripts=2.10.60
Devscripts Devel Team Devscripts=2.10.61
Devscripts Devel Team Devscripts=2.10.62
Devscripts Devel Team Devscripts=2.10.63
Devscripts Devel Team Devscripts=2.10.64
Devscripts Devel Team Devscripts=2.10.65.1
Devscripts Devel Team Devscripts=2.10.66
Devscripts Devel Team Devscripts=2.10.67
Devscripts Devel Team Devscripts=2.10.68
Devscripts Devel Team Devscripts=2.11.0
Devscripts Devel Team Devscripts=2.11.1
Devscripts Devel Team Devscripts=2.11.2
Devscripts Devel Team Devscripts=2.11.3
Remediation
Event History
Jun 16, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0210?
CVE-2012-0210 has a medium severity rating, allowing remote attackers to obtain system information and execute arbitrary code.
2
How do I fix CVE-2012-0210?
To fix CVE-2012-0210, upgrade to devscripts version 2.10.69 or 2.11.4 or later.
3
What versions of devscripts are affected by CVE-2012-0210?
CVE-2012-0210 affects devscripts versions 2.10.x before 2.10.69 and 2.11.x before 2.11.4.
4
Can CVE-2012-0210 lead to a full system compromise?
Yes, CVE-2012-0210 can potentially lead to a full system compromise if exploited successfully.
5
What types of files are involved in CVE-2012-0210 exploitation?
CVE-2012-0210 exploitation involves the file names in .dsc or .changes files.