CVE-2012-2242
N/A
Published: October 1, 2012 at 12:00 AM UTC
Updated: June 16, 2026 at 11:41 PM UTC
1 product affected across 1 vendorDevscripts
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 2.10.722.10.02.10.12.10.102.10.112.10.122.10.132.10.142.10.152.10.162.10.172.10.182.10.18.12.10.192.10.202.10.212.10.222.10.232.10.242.10.252.10.262.10.272.10.282.10.292.10.32.10.302.10.312.10.322.10.332.10.342.10.352.10.362.10.382.10.392.10.402.10.412.10.422.10.432.10.442.10.452.10.462.10.472.10.482.10.492.10.502.10.512.10.522.10.532.10.542.10.552.10.562.10.572.10.582.10.592.10.62.10.602.10.612.10.622.10.632.10.642.10.65.12.10.662.10.672.10.682.10.692.10.69 squeeze12.10.69 squeeze22.10.69 squeeze32.10.69 squeeze42.10.72.10.702.10.712.10.82.10.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/50600Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2012/dsa-2549Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card