Directory traversal

2018-07-1614:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.

CPENameOperatorVersion
debian_linuxeq8.0
debian_linuxeq7.0
x_file_explorereq1.32.5

Name	Operator	Version
debian_linux	eq	8.0
debian_linux	eq	7.0
x_file_explorer	eq	1.32.5

References

www.openwall.com/lists/oss-security/2014/02/24/5

www.securityfocus.com/bid/65748

bugs.debian.org/cgi-bin/bugreport.cgi?bug=739536

bugzilla.redhat.com/show_bug.cgi?id=1069066

exchange.xforce.ibmcloud.com/vulnerabilities/91519