PT-2011-2323 · Debian · Dpkg

Publicado 2011-01-11 · Atualizado 2017-08-17 · CVE-2011-0402

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dpkg versions prior to 1.14.31 dpkg version 1.15.x

Description The issue allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.

Recommendations For dpkg versions prior to 1.14.31, update to version 1.14.31 or later. For dpkg version 1.15.x, consider restricting access to the .pc directory until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2011-0402

DSA-2142-1

Produtos afetados

Dpkg

Referências · 17

• https://nvd.nist.gov/vuln/detail/CVE-2011-0402 · Nota de Segurança
• http://secunia.com/advisories/43054 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053306.html · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2142 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0402 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64614 · Nota
• http://vupen.com/english/advisories/2011/0044 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053311.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-0402 · Aviso do Fabricante
• http://secunia.com/advisories/42826 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0196 · Nota
• http://securityfocus.com/bid/45703 · Nota
• http://ubuntu.com/usn/USN-1038-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0040 · Aviso do Fabricante
• http://secunia.com/advisories/42831 · Aviso do Fabricante