Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Raphael Geissert discovered that uscan, a program to check for availability of new source code versions which is part of the devscripts package, runs Perl code downloaded from potentially untrusted sources to implement its URL and version mangling functionality. This update addresses this issue by reimplementing the relevant Perl operators without relying on the Perl interpreter, trying to preserve backwards compatibility as much as possible.

USN-847-1 fixed vulnerabilities in devscripts. This update provides the corresponding updates for Ubuntu 6.06 LTS.

Raphael Geissert discovered that uscan, a part of devscripts, did not properly sanitize its input when processing pathnames. If uscan processed a crafted filename for a file on a remote server, an attacker could execute arbitrary code with the privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Raphael Geissert discovered that uscan, a part of devscripts, did not properly sanitize its input when processing pathnames. If uscan processed a crafted filename for a file on a remote server, an attacker could execute arbitrary code with the privileges of the user invoking the program.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of devscripts uscan that is potentially affected by a code execution vulnerability.  The application runs Perl code downloaded from potentially untrusted sources to implement its URL and version mangling functionality.  An attacker could exploit this flaw to execute arbitrary code on the remote host.

ID	Name	Product	Family	Severity
44743	Debian DSA-1878-1 : devscripts - missing input sanitation	Nessus	Debian Local Security Checks	high
42093	Ubuntu 6.06 LTS : devscripts vulnerability (USN-847-2)	Nessus	Ubuntu Local Security Checks	high
42082	Ubuntu 8.04 LTS / 8.10 / 9.04 : devscripts vulnerability (USN-847-1)	Nessus	Ubuntu Local Security Checks	high
5175	Debian devscripts 'uscan' Input Validation Vulnerability	Nessus Network Monitor	Web Clients	medium

Detections

Analytics

CVE-2009-2946

critical

Tenable Plugins

high

high

high

medium