CVE-2012-0212

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-16 · updated 2026-06-16
Weakness: CWE-20

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

Affected products

Devscripts Devel Team Devscripts: 2.10.0, 2.10.1, 2.10.3, 2.10.6, 2.10.7, 2.10.8 (+64)

References

http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03
http://secunia.com/advisories/47955
http://secunia.com/advisories/48039
http://ubuntu.com/usn/usn-1366-1
http://www.debian.org/security/2012/dsa-2409
http://www.osvdb.org/79322
http://www.securityfocus.com/bid/52029
http://www.ubuntu.com/usn/USN-1593-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/73217
http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git%3Ba=commitdiff%3Bh=9cbe605d3eab4f9e67525f69b676c55b273b7a03
http://secunia.com/advisories/47955
http://secunia.com/advisories/48039

Get alerted when CVE-2012-0212 or the next vulnerability affects your stack