CVE-2013-7085: Input Validation
Uscan in devscripts 2.13.5, when USCANEXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
devscripts 2.13.5 (uscan)to a version that resolves this vulnerability.Fixed in 2.13.5
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7085?
CVE-2013-7085 is classified as a moderate severity vulnerability that allows remote attackers to delete arbitrary files.
How do I fix CVE-2013-7085?
To fix CVE-2013-7085, ensure that USCAN_EXCLUSION is disabled or update to a patched version of devscripts beyond 2.13.5.
Who is affected by CVE-2013-7085?
CVE-2013-7085 specifically affects users of devscripts version 2.13.5 with USCAN_EXCLUSION enabled.
What type of attacks can be performed using CVE-2013-7085?
Exploiting CVE-2013-7085 allows an attacker to delete arbitrary files on a vulnerable system via crafted filenames.
When was CVE-2013-7085 discovered?
CVE-2013-7085 was officially reported in December 2013.