CVE-2012-0212: Input Validation
Published Jun 16, 2012
·Updated
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.
Affected Software
70 affected components
Devscripts Devel Team Devscripts=2.10.0
Devscripts Devel Team Devscripts=2.10.1
Devscripts Devel Team Devscripts=2.10.3
Devscripts Devel Team Devscripts=2.10.6
Devscripts Devel Team Devscripts=2.10.7
Devscripts Devel Team Devscripts=2.10.8
Devscripts Devel Team Devscripts=2.10.9
Devscripts Devel Team Devscripts=2.10.10
Devscripts Devel Team Devscripts=2.10.11
Devscripts Devel Team Devscripts=2.10.12
Devscripts Devel Team Devscripts=2.10.13
Devscripts Devel Team Devscripts=2.10.14
Devscripts Devel Team Devscripts=2.10.15
Devscripts Devel Team Devscripts=2.10.16
Devscripts Devel Team Devscripts=2.10.17
Devscripts Devel Team Devscripts=2.10.18
Devscripts Devel Team Devscripts=2.10.18.1
Devscripts Devel Team Devscripts=2.10.19
Devscripts Devel Team Devscripts=2.10.20
Devscripts Devel Team Devscripts=2.10.21
Devscripts Devel Team Devscripts=2.10.22
Devscripts Devel Team Devscripts=2.10.23
Devscripts Devel Team Devscripts=2.10.24
Devscripts Devel Team Devscripts=2.10.25
Devscripts Devel Team Devscripts=2.10.26
Devscripts Devel Team Devscripts=2.10.27
Devscripts Devel Team Devscripts=2.10.28
Devscripts Devel Team Devscripts=2.10.29
Devscripts Devel Team Devscripts=2.10.30
Devscripts Devel Team Devscripts=2.10.31
Devscripts Devel Team Devscripts=2.10.32
Devscripts Devel Team Devscripts=2.10.33
Devscripts Devel Team Devscripts=2.10.34
Devscripts Devel Team Devscripts=2.10.35
Devscripts Devel Team Devscripts=2.10.36
Devscripts Devel Team Devscripts=2.10.38
Devscripts Devel Team Devscripts=2.10.39
Devscripts Devel Team Devscripts=2.10.40
Devscripts Devel Team Devscripts=2.10.41
Devscripts Devel Team Devscripts=2.10.42
Devscripts Devel Team Devscripts=2.10.43
Devscripts Devel Team Devscripts=2.10.44
Devscripts Devel Team Devscripts=2.10.45
Devscripts Devel Team Devscripts=2.10.46
Devscripts Devel Team Devscripts=2.10.47
Devscripts Devel Team Devscripts=2.10.48
Devscripts Devel Team Devscripts=2.10.49
Devscripts Devel Team Devscripts=2.10.50
Devscripts Devel Team Devscripts=2.10.51
Devscripts Devel Team Devscripts=2.10.52
Devscripts Devel Team Devscripts=2.10.53
Devscripts Devel Team Devscripts=2.10.54
Devscripts Devel Team Devscripts=2.10.55
Devscripts Devel Team Devscripts=2.10.56
Devscripts Devel Team Devscripts=2.10.57
Devscripts Devel Team Devscripts=2.10.58
Devscripts Devel Team Devscripts=2.10.59
Devscripts Devel Team Devscripts=2.10.60
Devscripts Devel Team Devscripts=2.10.61
Devscripts Devel Team Devscripts=2.10.62
Devscripts Devel Team Devscripts=2.10.63
Devscripts Devel Team Devscripts=2.10.64
Devscripts Devel Team Devscripts=2.10.65.1
Devscripts Devel Team Devscripts=2.10.66
Devscripts Devel Team Devscripts=2.10.67
Devscripts Devel Team Devscripts=2.10.68
Devscripts Devel Team Devscripts=2.11.0
Devscripts Devel Team Devscripts=2.11.1
Devscripts Devel Team Devscripts=2.11.2
Devscripts Devel Team Devscripts=2.11.3
Event History
Jun 16, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0212?
CVE-2012-0212 is classified as a high severity vulnerability due to its capability to allow remote code execution.
2
How do I fix CVE-2012-0212?
To fix CVE-2012-0212, update devscripts to version 2.10.69 or 2.11.4 or later.
3
What does CVE-2012-0212 exploit?
CVE-2012-0212 exploits vulnerabilities in debdiff.pl that allow remote attackers to execute arbitrary code via shell metacharacters in file name arguments.
4
Which versions of devscripts are affected by CVE-2012-0212?
CVE-2012-0212 affects devscripts versions 2.10.x before 2.10.69 and 2.11.x before 2.11.4.
5
Who can be affected by CVE-2012-0212?
Anyone running affected versions of devscripts could be susceptible to attacks exploiting CVE-2012-0212.