Lucene search
PRIOn knowledge basePRION:CVE-2017-8921HistoryMay 12, 2017 - 7:29 p.m.
Directory traversal
2017-05-1219:29:00
PRIOn knowledge base
www.prio-n.com
3
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML). A resource such as a malicious third-party aircraft could exploit this to damage files belonging to the user. Both this issue and CVE-2016-9956 are directory traversal vulnerabilities in Autopilot/route_mgr.cxx - this one exists because of an incomplete fix for CVE-2016-9956.
| CPE | Name | Operator | Version |
|---|---|---|---|
| flightgear | le | 2017.2 |
Related
cvelist
cvelist
CVE-2017-8921
2022-10-03 16:23:05
CVE-2016-9956
2017-02-22 16:00:00
nvd
nvd
CVE-2017-8921
2017-05-12 19:29:00
CVE-2016-9956
2017-02-22 16:59:00
debiancve
debiancve
CVE-2017-8921
2022-10-03 16:23:05
CVE-2016-9956
2017-02-22 16:59:00
cve
cve
CVE-2017-8921
2022-10-03 16:23:05
CVE-2016-9956
2017-02-22 16:59:00
ubuntucve
ubuntucve
CVE-2017-8921
2017-05-12 00:00:00
CVE-2016-9956
2017-02-22 00:00:00
openvas
openvas
Fedora Update for FlightGear FEDORA-2017-fc10e3165a
2017-05-25 00:00:00
Debian Security Advisory DSA 3742-1 (flightgear - security update)
2016-12-20 00:00:00
Debian: Security Advisory (DSA-3742-1)
2016-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: FlightGear-2016.1.2-6.fc24
2017-05-24 04:56:51
[SECURITY] Fedora 24 Update: FlightGear-2016.1.2-5.fc24
2017-01-06 21:50:07
[SECURITY] Fedora 26 Update: FlightGear-2017.1.3-2.fc26
2017-06-09 19:43:53
mageia
mageia
Updated flightgear packages fix security vulnerability
2017-01-09 13:11:36
nessus
nessus
Fedora 25 : FlightGear (2016-01eba63bcc)
2017-01-10 00:00:00
Debian DSA-3742-1 : flightgear - security update
2016-12-21 00:00:00
Fedora 24 : FlightGear (2016-a1f774c3d7)
2017-01-10 00:00:00
osv
osv
flightgear - security update
2016-12-20 00:00:00
flightgear vulnerability
2020-10-19 20:46:35
veracode
veracode
Directory Traversal
2020-12-06 03:57:16
prion
prion
Design/Logic Flaw
2017-02-22 16:59:00
debian
debian
[SECURITY] [DSA 3742-1] flightgear security update
2016-12-20 17:36:54
ubuntu
ubuntu
FlightGear vulnerability
2020-10-19 00:00:00