CVE-2009-2946 | BDVDB-2026-38271 Detail

Description#

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=diff&rev=1984&sc=1
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515209
http://svn.debian.org/wsvn/devscripts/trunk/scripts/uscan.pl?op=log&rev=0&sc=1&isdir=0
http://www.debian.org/security/2009/dsa-1878

Exploit#

No public exploit known

History#

Version 12009-09-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.