CVE-2010-1679

2011-01-0600:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

88.8%

JSON

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and
1.15.x allows user-assisted remote attackers to modify arbitrary files via
directory traversal sequences in a patch for a source-format 3.0 package.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchdpkg< 1.15.4ubuntu2.3UNKNOWN
ubuntu10.04noarchdpkg< 1.15.5.6ubuntu4.5UNKNOWN
ubuntu10.10noarchdpkg< 1.15.8.4ubuntu3.1UNKNOWN