PT-2002-1247 · Red Hat · Red Hat+1

Publicado 2002-05-29 · Atualizado 2008-09-11 · CVE-2002-0169

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DocBook on Red Hat Linux versions 6.2 through 7.2

Description The default stylesheet for DocBook has an insecure option enabled, allowing users to potentially overwrite files outside the current directory from an untrusted document by using a full pathname as an element identifier.

Recommendations For Red Hat Linux versions 6.2 through 7.2, consider disabling the insecure option in the default stylesheet for DocBook to prevent potential file overwrites.

Correção

Identificadores relacionados

CVE-2002-0169

Produtos afetados

Docbook

Red Hat

Referências · 6

• http://osvdb.org/5349 · Nota
• http://iss.net/security_center/static/8983.php · Nota
• http://securityfocus.com/bid/4654 · Nota
• http://online.securityfocus.com/advisories/4095 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0169 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2002-062.html · Aviso do Fabricante