CVE-2010-1679

2011-01-0600:00:00

ubuntu.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.6%

JSON

Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and
1.15.x allows user-assisted remote attackers to modify arbitrary files via
directory traversal sequences in a patch for a source-format 3.0 package.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchdpkg< 1.15.4ubuntu2.3UNKNOWN
ubuntu10.04noarchdpkg< 1.15.5.6ubuntu4.5UNKNOWN
ubuntu10.10noarchdpkg< 1.15.8.4ubuntu3.1UNKNOWN