CVE-2012-0212 - Acicular American Pit Bull Terrier

Description

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.

Reference

http://secunia.com/advisories/47955 http://www.securityfocus.com/bid/52029 http://www.osvdb.org/79322 http://secunia.com/advisories/48039 http://www.debian.org/security/2012/dsa-2409 http://ubuntu.com/usn/usn-1366-1 http://anonscm.debian.org/gitweb/?p=devscripts/devscripts.git;a=commitdiff;h=9cbe605d3eab4f9e67525f69b676c55b273b7a03 http://www.ubuntu.com/usn/USN-1593-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/73217