CVE-2013-7050
published 2013-12-13CVE-2013-7050: The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary…
PriorityP346medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.90%
77.4th percentile
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | devscripts | < devscripts 2.13.8 (bookworm) | devscripts 2.13.8 (bookworm) |
| devscripts_devel_team | devscripts | <= 2.13.7 | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | — | — |
| devscripts_devel_team | devscripts | >= 0 < 2.13.8 | 2.13.8 |
| devscripts_devel_team | devscripts | >= 0 < 2.13.8 | 2.13.8 |
| devscripts_devel_team | devscripts | >= 0 < 2.13.8 | 2.13.8 |
| devscripts_devel_team | devscripts | >= 0 < 2.13.8 | 2.13.8 |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4pjc-5g8w-829w: The get_main_source_dir function in scripts/uscan
ghsa_unreviewed·2022-05-17
CVE-2013-7050 [MEDIUM] CWE-94 GHSA-4pjc-5g8w-829w: The get_main_source_dir function in scripts/uscan
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
OSV
CVE-2013-7050: The get_main_source_dir function in scripts/uscan
osv·2013-12-13·CVSS 6.8
CVE-2013-7050 [MEDIUM] CVE-2013-7050: The get_main_source_dir function in scripts/uscan
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
Debian
CVE-2013-7050: devscripts - The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8...
vendor_debian·2013·CVSS 6.8
CVE-2013-7050 [MEDIUM] CVE-2013-7050: devscripts - The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8...
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
Scope: local
bookworm: resolved (fixed in 2.13.8)
bullseye: resolved (fixed in 2.13.8)
forky: resolved (fixed in 2.13.8)
sid: resolved (fixed in 2.13.8)
trixie: resolved (fixed in 2.13.8)
No detection rules found.
No public exploits indexed.
http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849http://osvdb.org/100855http://seclists.org/oss-sec/2013/q4/470http://seclists.org/oss-sec/2013/q4/486http://www.securityfocus.com/bid/64241https://bugzilla.redhat.com/show_bug.cgi?id=1040266https://exchange.xforce.ibmcloud.com/vulnerabilities/89666http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849http://osvdb.org/100855http://seclists.org/oss-sec/2013/q4/470http://seclists.org/oss-sec/2013/q4/486http://www.securityfocus.com/bid/64241https://bugzilla.redhat.com/show_bug.cgi?id=1040266https://exchange.xforce.ibmcloud.com/vulnerabilities/89666
2013-12-13
Published