Vulnerability Database

317,182

Total vulnerabilities in the database

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.

  • Published: Sep 4, 2009
  • Updated: Nov 9, 2025
  • CVE: CVE-2009-2946
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
devscripts_devel_team / devscripts - -