Lucene search
Veracode Vulnerability DatabaseVERACODE:29403HistoryFeb 15, 2021 - 10:51 p.m.
Directory Traversal
2021-02-1522:51:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.013 Low
EPSS
Percentile
85.7%
busybox is vulnerable to directory traversal. A remote attacker is able to perform a symlink attack to gain access to files outside of the current working directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| busybox:stretch | eq | 1:1.22.0-19+b3 |
References
packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
seclists.org/fulldisclosure/2019/Jun/18
seclists.org/fulldisclosure/2020/Aug/20
www.openwall.com/lists/oss-security/2015/10/21/7
bugzilla.redhat.com/show_bug.cgi?id=1274215
lists.debian.org/debian-lts-announce/2018/07/msg00037.html
lists.debian.org/debian-lts-announce/2021/02/msg00020.html
seclists.org/bugtraq/2019/Jun/14
security-tracker.debian.org/tracker/CVE-2011-5325
usn.ubuntu.com/3935-1/
Related
cve
cve
CVE-2011-5325
2017-08-07 17:29:00
CVE-2022-23227
2022-01-14 18:15:10
nessus
nessus
Debian DLA-1445-3 : busybox regression update
2018-07-27 00:00:00
RHEL 4 : busybox (Unpatched Vulnerability)
2024-06-03 00:00:00
openSUSE 15 Security Update : busybox (openSUSE-SU-2021:3531-1)
2021-10-28 00:00:00
ubuntucve
ubuntucve
CVE-2011-5325
2017-08-07 00:00:00
cvelist
cvelist
CVE-2011-5325
2017-08-07 17:00:00
CVE-2022-23227
2022-01-14 17:13:57
debian
debian
[SECURITY] [DLA 1445-3] busybox regression update
2018-08-03 05:18:30
[SECURITY] [DLA 1445-1] busybox security update
2018-07-27 04:39:37
[SECURITY] [DLA 2559-1] busybox security update
2021-02-15 11:56:52
debiancve
debiancve
CVE-2011-5325
2017-08-07 17:29:00
prion
prion
Directory traversal
2017-08-07 17:29:00
Design/Logic Flaw
2022-01-14 18:15:00
nvd
nvd
CVE-2011-5325
2017-08-07 17:29:00
CVE-2022-23227
2022-01-14 18:15:10
openvas
openvas
NUUO NVRmini 2 <= 03.11.0000.0016 RCE Vulnerability - Active Check
2022-01-18 00:00:00
openSUSE: Security Advisory for busybox (openSUSE-SU-2021:1408-1)
2021-11-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3531-1)
2021-10-28 00:00:00
suse
suse
Security update for busybox (important)
2021-10-27 00:00:00
Security update for busybox (important)
2021-10-31 00:00:00
Security update for busybox (important)
2022-05-18 00:00:00
osv
osv
busybox - security update
2021-02-15 00:00:00
busybox - security update
2018-07-27 00:00:00
packetstorm
packetstorm
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
2020-08-27 00:00:00
ubuntu
ubuntu
BusyBox vulnerabilities
2019-04-03 00:00:00
cloudfoundry
cloudfoundry
USN-3935-1: BusyBox vulnerabilities | Cloud Foundry
2019-04-12 00:00:00