CVEs-PoC/2013/CVE-2013-7085.md

CVE-2013-7085

Description

Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.

POC

Reference

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732006
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732006

Github

No PoCs found on GitHub currently.