CVE-2012-2241

Publication date 15 September 2012

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.

Status

Package Ubuntu Release Status
devscripts 12.04 LTS precise
Fixed 2.11.6ubuntu1.4
11.10 oneiric
Fixed 2.11.1ubuntu3.2
11.04 natty
Fixed 2.10.69ubuntu2.2
10.04 LTS lucid
Fixed 2.10.61ubuntu5.3
8.04 LTS hardy Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-1593-1
    • devscripts vulnerabilities
    • 2 October 2012

Other references