Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2014-3864
HistoryMay 30, 2014 - 6:55 p.m.

CVE-2014-3864

2014-05-3018:55:06
CWE-22
mitre
web.nvd.nist.gov
35
cve
2014
3864
directory traversal
dpkg-source
dpkg-dev
vulnerability
remote attackers
crafted source package
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.012

Percentile

85.3%

JSON

Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a — header line.

Affected configurations

Nvd
Node
debiandpkg-devMatch1.3.0
VendorProductVersionCPE
debiandpkg-dev1.3.0cpe:2.3:a:debian:dpkg-dev:1.3.0:*:*:*:*:*:*:*

Related

cvelist 1
debiancve 1
prion 1
nvd 1
ubuntucve 1
ubuntu 1
openvas 7
nessus 4
osv 1
debian 1
fedora 3
mageia 1
securityvulns 2
cvelist
cvelist
CVE-2014-3864
2014-05-30 18:00:00
debiancve
debiancve
CVE-2014-3864
2014-05-30 18:55:06
prion
prion
Directory traversal
2014-05-30 18:55:00
nvd
nvd
CVE-2014-3864
2014-05-30 18:55:06
ubuntucve
ubuntucve
CVE-2014-3864
2014-05-30 00:00:00
ubuntu
ubuntu
dpkg vulnerabilities
2014-06-10 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2953-1)
2014-06-07 00:00:00
Debian Security Advisory DSA 2953-1 (dpkg - security update)
2014-06-08 00:00:00
Ubuntu: Security Advisory (USN-2242-1)
2014-06-17 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : dpkg vulnerabilities (USN-2242-1)
2014-06-11 00:00:00
Debian DSA-2953-1 : dpkg - security update
2014-06-09 00:00:00
Fedora 20 : dpkg-1.16.15-1.fc20 (2014-7697)
2014-07-21 00:00:00
osv
osv
dpkg - security update
2014-06-08 00:00:00
debian
debian
[SECURITY] [DSA 2953-1] dpkg security update
2014-06-08 15:36:49
fedora
fedora
[SECURITY] Fedora 19 Update: dpkg-1.16.15-1.fc19
2014-08-07 15:34:11
[SECURITY] Fedora 20 Update: dpkg-1.16.15-1.fc20
2014-07-20 03:23:56
[SECURITY] Fedora 20 Update: dpkg-1.16.16-5.fc20
2015-05-12 20:49:31
mageia
mageia
Updated dpkg packages fixes security vulnerabilities
2014-07-09 02:47:58
securityvulns
securityvulns
dpkg directory traversal
2014-06-13 00:00:00
[oss-security] Re: CVE request: another path traversal in dpkg-source during unpack
2014-06-13 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.012

Percentile

85.3%

JSON
Related for CVE-2014-3864
cvelist1debiancve1prion1nvd1ubuntucve1ubuntu1openvas7nessus4osv1debian1fedora3mageia1securityvulns2