CVE-2013-7050
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using...
CVE-2013-7050 is a medium vulnerability (CVSS 6.8) in Devscripts Devel Team Devscripts, published December 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. Fixed in devscripts 2.13.8.
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
Exploit likelihood
What each source reports
NVD Score used
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- Updated
- 2026-11-02
EUVDEUVD-2013-6849 No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
EUVD-2013-6849- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4pjc-5g8w-829w No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using...
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
GHSA-4pjc-5g8w-829w- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7050 No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
DEBIAN-CVE-2013-7050- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
devscriptsDebian:12 |
before 2.13.8 | 2.13.8 |
devscriptsDebian:13 |
before 2.13.8 | 2.13.8 |
devscriptsDebian:14 |
before 2.13.8 | 2.13.8 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=1040266
seclists.org/oss-sec/2013/q4/486
osvdb.org/100855
securityfocus.com/bid/64241
anonscm.debian.org/gitweb?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5
Show 6 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/89666
bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849
nvd.nist.gov/vuln/detail/CVE-2013-7050
github.com/advisories/GHSA-4pjc-5g8w-829w
security-tracker.debian.org/tracker/CVE-2013-7050