CVE-2013-7050 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.