CVE-2015-5705

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.

• CWE-59

• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/01/7Mailing List, Third Party Advisory
• https://anonscm.debian.org/cgit/collab-maint/devscripts.git/commit/?id=d8f8fa1d8e4151fa62997cb74403f97ab0d7e1a2Patch, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1249645Issue Tracking, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163705.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-August/163710.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2015/08/01/7Mailing List, Third Party Advisory
• https://anonscm.debian.org/cgit/collab-maint/devscripts.git/commit/?id=d8f8fa1d8e4151fa62997cb74403f97ab0d7e1a2Patch, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794260Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1249645Issue Tracking, Third Party Advisory

Published

Sep 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5698Cross-site request forgery (CSRF) vulnerability in the web s…
• CVE-2015-5699The Switch Configuration Tools Backend (clcmd_server) in Cum…
• CVE-2015-5700mktexlsr revision 22855 through revision 36625 as packaged i…
• CVE-2015-5701mktexlsr revision 36855, and before revision 36626 as packag…
• CVE-2015-5703SQL injection vulnerability in the public key discovery API …
• CVE-2015-5704scripts/licensecheck.pl in devscripts before 2.15.7 allows l…
• CVE-2015-5706Use-after-free vulnerability in the path_openat function in …
• CVE-2015-5707Integer overflow in the sg_start_req function in drivers/scs…
• CVE-2015-5711TIBCO Managed File Transfer Internet Server before 7.2.5, Ma…
• CVE-2015-5712Spotfire Parsing Library and Spotfire Security Filter in TIB…
• CVE-2015-5713Spotfire Parsing Library and Spotfire Security Filter in TIB…
• CVE-2015-5714Cross-site scripting (XSS) vulnerability in WordPress before…