Devscripts Devel Team: >> Devscripts >> 2.12.0 Security Vulnerabilities
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
CVSS Score
7.5
EPSS Score
0.01
Published
2012-10-01
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.
CVSS Score
5.0
EPSS Score
0.006
Published
2012-10-01
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.
CVSS Score
1.2
EPSS Score
0.001
Published
2012-10-01