Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-7050
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-13 Dec, 2013 | 18:07
Updated At-29 Apr, 2026 | 01:13

The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.06.8MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Type: Primary
Version: 2.0
Base score: 6.8
Base severity: MEDIUM
Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P
CPE Matches
devscripts_devel_team
devscripts_devel_team
>>devscripts>>Versions up to 2.13.7(inclusive)
cpe:2.3:a:devscripts_devel_team:devscripts:*:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.0
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.0:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.1
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.1:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.2
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.2:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.3
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.3:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.4
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.4:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.5
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:*:*:*:*:*:*:*
devscripts_devel_team
devscripts_devel_team
>>devscripts>>2.13.6
cpe:2.3:a:devscripts_devel_team:devscripts:2.13.6:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-94Primarynvd@nist.gov
CWE ID: CWE-94
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5cve@mitre.org
N/A
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849cve@mitre.org
N/A
http://osvdb.org/100855cve@mitre.org
N/A
http://seclists.org/oss-sec/2013/q4/470cve@mitre.org
Patch
http://seclists.org/oss-sec/2013/q4/486cve@mitre.org
N/A
http://www.securityfocus.com/bid/64241cve@mitre.org
N/A
https://bugzilla.redhat.com/show_bug.cgi?id=1040266cve@mitre.org
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89666cve@mitre.org
N/A
http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5af854a3a-2127-422b-91ae-364da2661108
N/A
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849af854a3a-2127-422b-91ae-364da2661108
N/A
http://osvdb.org/100855af854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/oss-sec/2013/q4/470af854a3a-2127-422b-91ae-364da2661108
Patch
http://seclists.org/oss-sec/2013/q4/486af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/64241af854a3a-2127-422b-91ae-364da2661108
N/A
https://bugzilla.redhat.com/show_bug.cgi?id=1040266af854a3a-2127-422b-91ae-364da2661108
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/89666af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://osvdb.org/100855
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2013/q4/470
Source: cve@mitre.org
Resource:
Patch
Hyperlink: http://seclists.org/oss-sec/2013/q4/486
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/64241
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1040266
Source: cve@mitre.org
Resource:
Patch
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/89666
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://anonscm.debian.org/gitweb/?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://osvdb.org/100855
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://seclists.org/oss-sec/2013/q4/470
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: http://seclists.org/oss-sec/2013/q4/486
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/64241
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1040266
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/89666
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found