PT-2014-4320 · Debian+2 · Devscripts+2
CVE-2014-1833
·
Published
2014-02-05
·
Updated
2024-07-30
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
devscripts version 2.14.1
Description
A directory traversal issue in uupdate in devscripts allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.
Recommendations
For devscripts version 2.14.1, update to a version that fixes this issue to prevent remote attackers from modifying arbitrary files.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Ubuntu
Devscripts