CVE-2014-1833

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi
• osvdb.org/102748
• openwall.com/lists/oss-security/2014/01/31/11
• openwall.com/lists/oss-security/2014/01/31/7
• securityfocus.com/bid/65260
• ubuntu.com/usn/USN-2649-1
• bugzilla.redhat.com/show_bug.cgi · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/90842

devscripts のその他の脆弱性

• CVE-2015-5704高 7.8scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
• CVE-2015-5705高 7.5Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and c…
• CVE-2013-6888高 7.5Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
• CVE-2013-7085中 5.8Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in…
• CVE-2013-7050中 6.8The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exe…