← Database

CVE-2009-2946

CRITICAL CVSS: 9.3 Published: 2009-09-04 Modified: 2026-06-16

Description

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

Affected Platforms

Debian LinuxDevscripts Devel Team Devscripts

Weakness Type

NVD-CWE-Other

References