CVE-2015-1396

2019-11-25T16:15:00
ID CVE-2015-1396
Type cve
Reporter cve@mitre.org
Modified 2020-02-17T18:15:00

Description

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.