Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Dmnks

#27520de 53,638
9.3CVSS total
Vulnerabilidades · 1
PT-2018-2217
9.3
2018-07-30
Yum · Yum-Utils · CVE-2018-10897
**Name of the Vulnerable Software and Affected Versions** yum-utils versions 1.1.31 and older **Description** A directory traversal issue exists in reposync, a part of yum-utils, due to insufficient path sanitization in remote repository configuration files. This allows an attacker controlling a repository to potentially copy files outside the destination directory on a targeted system via path traversal. If reposync runs with heightened privileges, this flaw could result in system compromise by overwriting critical system files. The issue may enable a remote attacker to create, modify, or delete arbitrary files. **Recommendations** For versions 1.1.31 and older, at the moment, there is no information about a newer version that contains a fix for this vulnerability.