Directory Traversal

2019-01-1509:25:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

redhat-virtualization-host is vulnerable to directory traversal attacks. The vulnerability exists as a directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path traversal. If reposync is running with heightened privileges on a targeted system, this flaw could potentially result in system compromise via the overwriting of critical system files. Version 1.1.31 and older are believed to be affected.

CPENameOperatorVersion
yum-utilseq1.1.30__6.el6
yum-utilseq1.1.30__14.el6
yum-utilseq1.1.30__37.el6
yum-utilseq1.1.30__30.el6
yum-utilseq1.1.30__41.el6
yum-utilseq1.1.26__11.el6
yum-utilseq1.1.30__10.el6
yum-utilseq1.1.30__40.el6
yum-utilseq1.1.30__17.el6_5
redhat-release-virtualization-hosteq4.1__1.1.el7

Name	Operator	Version
yum-utils	eq	1.1.30__6.el6
yum-utils	eq	1.1.30__14.el6
yum-utils	eq	1.1.30__37.el6
yum-utils	eq	1.1.30__30.el6
yum-utils	eq	1.1.30__41.el6
yum-utils	eq	1.1.26__11.el6
yum-utils	eq	1.1.30__10.el6
yum-utils	eq	1.1.30__40.el6
yum-utils	eq	1.1.30__17.el6_5
redhat-release-virtualization-host	eq	4.1__1.1.el7