Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0402
HistoryJan 11, 2011 - 12:00 a.m.

CVE-2011-0402

2011-01-1100:00:00
ubuntu.com
ubuntu.com
12

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

88.8%

dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote
attackers to modify arbitrary files via a symlink attack on unspecified
files in the .pc directory.

Notes

Author Note
jdstrand only source version 3.0 packages
OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchdpkg< 1.15.4ubuntu2.3UNKNOWN
ubuntu10.04noarchdpkg< 1.15.5.6ubuntu4.5UNKNOWN
ubuntu10.10noarchdpkg< 1.15.8.4ubuntu3.1UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.02

Percentile

88.8%