CVE-2015-5704

概要

参考情報

• lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.html · Third Party Advisory
• lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.html · Third Party Advisory
• openwall.com/lists/oss-security/2015/08/01/7 · Mailing List
• securityfocus.com/bid/76143 · Third Party Advisory
• anonscm.debian.org/cgit/collab-maint/devscripts.git/commit · Patch
• bugs.debian.org/cgi-bin/bugreport.cgi · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

devscripts のその他の脆弱性

• CVE-2015-5705高 7.5Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and c…
• CVE-2014-1833中 5.0Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar …
• CVE-2013-6888高 7.5Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
• CVE-2013-7085中 5.8Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in…
• CVE-2013-7050中 6.8The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exe…