7.5

CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Devscripts Devel Team ≫ Devscripts Version <= 2.13.8
Devscripts Devel Team ≫ Devscripts Version2.13.0
Devscripts Devel Team ≫ Devscripts Version2.13.1
Devscripts Devel Team ≫ Devscripts Version2.13.2
Devscripts Devel Team ≫ Devscripts Version2.13.3
Devscripts Devel Team ≫ Devscripts Version2.13.4
Devscripts Devel Team ≫ Devscripts Version2.13.5
Devscripts Devel Team ≫ Devscripts Version2.13.6
Devscripts Devel Team ≫ Devscripts Version2.13.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.09% 0.894
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=02c6850d973e3e1246fde72edab27f03d63acc52
http://marc.info/?l=oss-security&m=138900586911271&w=2
http://secunia.com/advisories/56192
http://secunia.com/advisories/56579
http://www.debian.org/security/2014/dsa-2836
http://www.securityfocus.com/bid/64656
http://www.ubuntu.com/usn/USN-2084-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/90107