CVE-2013-7050
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using...
CVE-2013-7050 is a medium vulnerability (CVSS 6.8) in Devscripts Devel Team Devscripts, published December 13, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 80th percentile. Fixed in devscripts 2.13.8.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.90%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.13.8devscripts +2 more
Description
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
devscriptsDebian:12 | before 2.13.8 | 2.13.8 |
devscriptsDebian:13 | before 2.13.8 | 2.13.8 |
devscriptsDebian:14 | before 2.13.8 | 2.13.8 |
What each source reports
NVD Score used
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- Updated
- 2026-11-02
EUVDEUVD-2013-6849No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
EUVD-2013-6849- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4pjc-5g8w-829wNo score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using...
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
GHSA-4pjc-5g8w-829w- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVNo score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
CVE-2013-7050- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7050No score
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
- Record
DEBIAN-CVE-2013-7050- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=1040266
seclists.org/oss-sec/2013/q4/486
osvdb.org/100855
securityfocus.com/bid/64241
anonscm.debian.org/gitweb?p=collab-maint/devscripts.git%3Ba=commitdiff%3Bh=91f05b5
Show 6 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/89666
bugs.debian.org/cgi-bin/bugreport.cgi?bug=731849
nvd.nist.gov/vuln/detail/CVE-2013-7050
github.com/advisories/GHSA-4pjc-5g8w-829w
security-tracker.debian.org/tracker/CVE-2013-7050