Lucene search

K
cve[email protected]CVE-2011-1932
HistoryDec 05, 2011 - 11:55 a.m.

CVE-2011-1932

2011-12-0511:55:05
CWE-22
web.nvd.nist.gov
23
cve-2011-1932
directory traversal
filesystem
widelands
vulnerability
file transfer
internet game

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%

Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname that is used for a file transfer in an Internet game.

Affected configurations

NVD
Node
widelandswidelandsMatch-build1
OR
widelandswidelandsMatch-build10
OR
widelandswidelandsMatch-build10_release_candidate
OR
widelandswidelandsMatch-build11
OR
widelandswidelandsMatch-build11_release_candidate
OR
widelandswidelandsMatch-build12
OR
widelandswidelandsMatch-build12_release_candidate
OR
widelandswidelandsMatch-build13
OR
widelandswidelandsMatch-build13_release_candidate
OR
widelandswidelandsMatch-build13_release_candidate2
OR
widelandswidelandsMatch-build14
OR
widelandswidelandsMatch-build14_release_candidate
OR
widelandswidelandsMatch-build2
OR
widelandswidelandsMatch-build3
OR
widelandswidelandsMatch-build4
OR
widelandswidelandsMatch-build5
OR
widelandswidelandsMatch-build6
OR
widelandswidelandsMatch-build7
OR
widelandswidelandsMatch-build8
OR
widelandswidelandsMatch-build9
CPENameOperatorVersion
widelands:widelandswidelandseq-

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%