CVE-2013-7085

Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.

Date published : 2013-12-14

http://www.securityfocus.com/bid/64258

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732006