CVE-2000-0354

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

CVE-2000-0354

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

CVE-2000-0354

CVE-2000-0354 affects mirror 2.8.x on Linux; remote attackers can create files one level above the local target directory. Impact: partial integrity impact via a network vector with low complexity and no authentication. No remediation details are provided in the supplied documents.

[SECURITY] New version of mirror fixes remote exploit

We have received reports that the version of mirror as distributed in Debian GNU/Linux 2.1 could be remotely exploited. When mirroring a remote site the remote site could use filename-constructions like " .." that would case mirror to work one level above the target directory for the mirrored...

[SECURITY] New version of mirror fixes remote exploit

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 18, 1999 - ------------------------------------------------------------------------ We have received reports that the...

"mirror" directory traversal

mirror is a Perl script which is widely used for making copy of remote FTP site. It's included in FreeBSD packages. There are security holes, which allows overwrite local files from remote ftp site with permissions of the user who uses mirror. Then retrieving directory listing mirror doesn't chec...