John G. MyersMpack
2 matches found
CVE-2002-1425
CVE-2002-1425 describes a directory traversal vulnerability in the munpack utility (part of mpack) versions 1.5 and earlier. The issue allows remote attackers to create new files in the parent directory by supplying a filename containing a ../ sequence during extraction. Debian DSAs and OpenVAS e...
6.4CVSS6.5AI score0.01881EPSS
Save
CVE-2002-1424
CVE-2002-1424 describes a buffer overflow in the munpack component of the mpack package (version 1.5 and earlier). The underlying issue allows remote attackers to cause a denial of service and potentially execute arbitrary code. Public advisories indicate fixes have been released in subsequent De...
5CVSS7.7AI score0.04003EPSS
Save