CVE-2002-1425

Опубликовано: 11 апр. 2003

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.

Ссылки

http://www.debian.org/security/2002/dsa-141
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9748.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5386
Patch
Vendor Advisory
http://www.debian.org/security/2002/dsa-141
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9748.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5386
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:john_g._myers:mpack:*:*:*:*:*:*:*:*

Версия до 1.5 (включая)

EPSS

Процентиль: 82%

0.01789

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1425

debian

больше 22 лет назад

Directory traversal vulnerability in munpack in mpack 1.5 and earlier ...

GHSA-r7hv-r822-rph8

github

больше 3 лет назад