Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2013-5648HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-5648
2022-10-0316:14:56
Debian Security Bug Tracker
security-tracker.debian.org
9
cve-2013-5648
handlestartdatafile function
libdigidoc 3.6.0.0
id-software
ddoc file
overwrite arbitrary files
remote attackers
unix
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.8%
Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / (slash) or \ (backslash) in a DDOC file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libdigidoc | < 3.10.5-4 | libdigidoc_3.10.5-4_all.deb |
| Debian | 11 | all | libdigidoc | < 3.10.5-2 | libdigidoc_3.10.5-2_all.deb |
| Debian | 999 | all | libdigidoc | < 3.10.5-5 | libdigidoc_3.10.5-5_all.deb |
| Debian | 13 | all | libdigidoc | < 3.10.5-5 | libdigidoc_3.10.5-5_all.deb |
Related
fedora
fedora
[SECURITY] Fedora 21 Update: libdigidoc-3.9.1.1191-1.fc21
2014-11-18 12:20:58
prion
prion
Path traversal
2013-08-29 12:07:00
nessus
nessus
Fedora 21 : libdigidoc-3.9.1.1191-1.fc21 (2014-14892)
2014-11-19 00:00:00
Mandriva Linux Security Advisory : libdigidoc (MDVSA-2013:225)
2013-09-03 00:00:00
cve
cve
CVE-2013-5648
2022-10-03 16:14:56
securityvulns
securityvulns
[ MDVSA-2013:225 ] libdigidoc
2013-09-09 00:00:00
libdigidoc unauthorized access
2013-09-09 00:00:00
cvelist
cvelist
CVE-2013-5648
2022-10-03 16:14:56
ubuntucve
ubuntucve
CVE-2013-5648
2013-08-29 00:00:00
mageia
mageia
Updated libdigidoc packages fix CVE-2013-5648
2013-08-30 21:44:17
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0268)
2022-01-28 00:00:00
nvd
nvd
CVE-2013-5648
2013-08-29 12:07:56
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.8%
Related for DEBIANCVE:CVE-2013-5648