| Max CVSS | 7.5 | Min CVSS | 1.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-3500 | 1.2 |
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.
|
13-02-2023 - 04:34 | 01-10-2012 - 00:55 | |
| CVE-2012-2241 | 5.0 |
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.
|
29-08-2017 - 01:31 | 01-10-2012 - 00:55 | |
| CVE-2012-2242 | 6.8 |
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than
|
19-04-2013 - 03:21 | 01-10-2012 - 00:55 | |
| CVE-2012-2240 | 7.5 |
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
|
19-04-2013 - 03:21 | 01-10-2012 - 00:55 |