Lucene search
HistoryJan 11, 2011 - 3:00 a.m.
CVE-2010-1679
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.02
Percentile
88.8%
Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.
Affected configurations
Node
debiandpkgRange≤1.14.30
ORdebiandpkgMatch1.9.19
ORdebiandpkgMatch1.9.20
ORdebiandpkgMatch1.9.21
ORdebiandpkgMatch1.10
ORdebiandpkgMatch1.10.1
ORdebiandpkgMatch1.10.2
ORdebiandpkgMatch1.10.3
ORdebiandpkgMatch1.10.4
ORdebiandpkgMatch1.10.5
ORdebiandpkgMatch1.10.6
ORdebiandpkgMatch1.10.7
ORdebiandpkgMatch1.10.8
ORdebiandpkgMatch1.10.9
ORdebiandpkgMatch1.10.10
ORdebiandpkgMatch1.10.11
ORdebiandpkgMatch1.10.12
ORdebiandpkgMatch1.10.13
ORdebiandpkgMatch1.10.14
ORdebiandpkgMatch1.10.15
ORdebiandpkgMatch1.10.16
ORdebiandpkgMatch1.10.17
ORdebiandpkgMatch1.10.18
ORdebiandpkgMatch1.10.18.1
ORdebiandpkgMatch1.10.19
ORdebiandpkgMatch1.10.20
ORdebiandpkgMatch1.10.21
ORdebiandpkgMatch1.10.22
ORdebiandpkgMatch1.10.23
ORdebiandpkgMatch1.10.24
ORdebiandpkgMatch1.10.25
ORdebiandpkgMatch1.10.26
ORdebiandpkgMatch1.10.27
ORdebiandpkgMatch1.10.28
ORdebiandpkgMatch1.13.0
ORdebiandpkgMatch1.13.1
ORdebiandpkgMatch1.13.2
ORdebiandpkgMatch1.13.3
ORdebiandpkgMatch1.13.4
ORdebiandpkgMatch1.13.5
ORdebiandpkgMatch1.13.6
ORdebiandpkgMatch1.13.7
ORdebiandpkgMatch1.13.8
ORdebiandpkgMatch1.13.9
ORdebiandpkgMatch1.13.10
ORdebiandpkgMatch1.13.11
ORdebiandpkgMatch1.13.11.1
ORdebiandpkgMatch1.13.12
ORdebiandpkgMatch1.13.13
ORdebiandpkgMatch1.13.14
ORdebiandpkgMatch1.13.15
ORdebiandpkgMatch1.13.16
ORdebiandpkgMatch1.13.17
ORdebiandpkgMatch1.13.18
ORdebiandpkgMatch1.13.19
ORdebiandpkgMatch1.13.20
ORdebiandpkgMatch1.13.21
ORdebiandpkgMatch1.13.22
ORdebiandpkgMatch1.13.23
ORdebiandpkgMatch1.13.24
ORdebiandpkgMatch1.13.25
ORdebiandpkgMatch1.14.0
ORdebiandpkgMatch1.14.1
ORdebiandpkgMatch1.14.2
ORdebiandpkgMatch1.14.3
ORdebiandpkgMatch1.14.4
ORdebiandpkgMatch1.14.5
ORdebiandpkgMatch1.14.6
ORdebiandpkgMatch1.14.7
ORdebiandpkgMatch1.14.8
ORdebiandpkgMatch1.14.9
ORdebiandpkgMatch1.14.10
ORdebiandpkgMatch1.14.11
ORdebiandpkgMatch1.14.12
ORdebiandpkgMatch1.14.13
ORdebiandpkgMatch1.14.14
ORdebiandpkgMatch1.14.15
ORdebiandpkgMatch1.14.16
ORdebiandpkgMatch1.14.16.1
ORdebiandpkgMatch1.14.16.2
ORdebiandpkgMatch1.14.16.3
ORdebiandpkgMatch1.14.16.4
ORdebiandpkgMatch1.14.16.5
ORdebiandpkgMatch1.14.16.6
ORdebiandpkgMatch1.14.17
ORdebiandpkgMatch1.14.18
ORdebiandpkgMatch1.14.19
ORdebiandpkgMatch1.14.20
ORdebiandpkgMatch1.14.21
ORdebiandpkgMatch1.14.22
ORdebiandpkgMatch1.14.23
ORdebiandpkgMatch1.14.24
ORdebiandpkgMatch1.14.25
ORdebiandpkgMatch1.14.26
ORdebiandpkgMatch1.14.27
ORdebiandpkgMatch1.14.28
ORdebiandpkgMatch1.14.29
Node
debiandpkgMatch1.15.0
ORdebiandpkgMatch1.15.1
ORdebiandpkgMatch1.15.2
ORdebiandpkgMatch1.15.3
ORdebiandpkgMatch1.15.3.1
ORdebiandpkgMatch1.15.4
ORdebiandpkgMatch1.15.4.1
ORdebiandpkgMatch1.15.5
ORdebiandpkgMatch1.15.5.1
ORdebiandpkgMatch1.15.5.2
ORdebiandpkgMatch1.15.5.3
ORdebiandpkgMatch1.15.5.4
ORdebiandpkgMatch1.15.5.5
ORdebiandpkgMatch1.15.5.6
ORdebiandpkgMatch1.15.6
ORdebiandpkgMatch1.15.6.1
ORdebiandpkgMatch1.15.7
ORdebiandpkgMatch1.15.7.1
ORdebiandpkgMatch1.15.7.2
ORdebiandpkgMatch1.15.8
ORdebiandpkgMatch1.15.8.1
ORdebiandpkgMatch1.15.8.2
ORdebiandpkgMatch1.15.8.3
ORdebiandpkgMatch1.15.8.4
ORdebiandpkgMatch1.15.8.5
ORdebiandpkgMatch1.15.8.6
ORdebiandpkgMatch1.15.8.7
ORdebiandpkgMatch1.15.8.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | dpkg | * | cpe:2.3:a:debian:dpkg:*:*:*:*:*:*:*:* |
| debian | dpkg | 1.9.19 | cpe:2.3:a:debian:dpkg:1.9.19:*:*:*:*:*:*:* |
| debian | dpkg | 1.9.20 | cpe:2.3:a:debian:dpkg:1.9.20:*:*:*:*:*:*:* |
| debian | dpkg | 1.9.21 | cpe:2.3:a:debian:dpkg:1.9.21:*:*:*:*:*:*:* |
| debian | dpkg | 1.10 | cpe:2.3:a:debian:dpkg:1.10:*:*:*:*:*:*:* |
| debian | dpkg | 1.10.1 | cpe:2.3:a:debian:dpkg:1.10.1:*:*:*:*:*:*:* |
| debian | dpkg | 1.10.2 | cpe:2.3:a:debian:dpkg:1.10.2:*:*:*:*:*:*:* |
| debian | dpkg | 1.10.3 | cpe:2.3:a:debian:dpkg:1.10.3:*:*:*:*:*:*:* |
| debian | dpkg | 1.10.4 | cpe:2.3:a:debian:dpkg:1.10.4:*:*:*:*:*:*:* |
| debian | dpkg | 1.10.5 | cpe:2.3:a:debian:dpkg:1.10.5:*:*:*:*:*:*:* |
References
lists.fedoraproject.org/pipermail/package-announce/2011-January/053306.html
lists.fedoraproject.org/pipermail/package-announce/2011-January/053311.html
osvdb.org/70368
secunia.com/advisories/42826
secunia.com/advisories/42831
secunia.com/advisories/43054
www.debian.org/security/2011/dsa-2142
www.securityfocus.com/bid/45703
www.ubuntu.com/usn/USN-1038-1
www.vupen.com/english/advisories/2011/0040
www.vupen.com/english/advisories/2011/0044
www.vupen.com/english/advisories/2011/0196
exchange.xforce.ibmcloud.com/vulnerabilities/64615
Related
debian
debian
[SECURITY] [DSA-2142-1] New dpkg packages fix directory traversal
2011-01-06 18:20:14
prion
prion
Directory traversal
2011-01-11 03:00:00
Directory traversal
2011-03-11 22:55:00
openvas
openvas
Ubuntu: Security Advisory (USN-1038-1)
2011-01-11 00:00:00
Ubuntu Update for dpkg vulnerability USN-1038-1
2011-01-11 00:00:00
Fedora Update for dpkg FEDORA-2011-0362
2011-01-24 00:00:00
debiancve
debiancve
CVE-2010-1679
2011-01-11 03:00:01
CVE-2010-4651
2011-03-11 22:55:02
ubuntucve
ubuntucve
CVE-2010-1679
2011-01-06 00:00:00
CVE-2010-4651
2011-03-11 00:00:00
nessus
nessus
Debian DSA-2142-1 : dpkg - directory traversal
2011-01-07 00:00:00
Oracle Solaris Third-Party Patch Update : gnu-patch (multiple_vulnerabilities_in_gnu_patch)
2015-01-19 00:00:00
Fedora 14 : dpkg-1.15.5.6-6.fc14 (2011-0362)
2011-01-24 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA-2142-1] New dpkg packages fix directory traversal
2011-01-07 00:00:00
dpkg directory traversal
2011-01-07 00:00:00
ubuntu
ubuntu
dpkg vulnerability
2011-01-06 00:00:00
cvelist
cvelist
CVE-2010-1679
2011-01-11 01:00:00
CVE-2010-4651
2011-03-11 22:00:00
cve
cve
CVE-2010-1679
2011-01-11 03:00:01
CVE-2010-4651
2011-03-11 22:55:02
nvd
nvd
CVE-2010-4651
2011-03-11 22:55:02
fedora
fedora
[SECURITY] Fedora 14 Update: dpkg-1.15.5.6-6.fc14
2011-01-21 22:53:12
[SECURITY] Fedora 13 Update: dpkg-1.15.5.6-6.fc13
2011-01-21 22:54:22
osv
osv
dpkg - directory traversal
2011-01-06 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.02
Percentile
88.8%
Related for NVD:CVE-2010-1679