CVE-2011-4675

CVE-2011-4675 affects Widelands prior to 15.1. The pathname canonicalization in io/filesystem/filesystem.cc expands leading ~ (tilde) characters to home-directory paths and does not restrict their use in network-provided strings, potentially allowing remote attackers to perform absolute path trav...

CVE-2011-4675

The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading tilde characters to home-directory pathnames but does not restrict use of these characters in strings received from the network, which might allow remote attackers to conduct absolu...