CVE-2002-1425 Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
MediumCVSS 6.4
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| john g. myers mpack | <= 1.5 | No fix listed |
| debian/mpack(Debian:12) | < 1.5-9 | 1.5-9 |
| debian/mpack(Debian:13) | < 1.5-9 | 1.5-9 |
| debian/mpack(Debian:14) | < 1.5-9 | 1.5-9 |
References
- DSA-141 patch vendor-advisory
- munpack-dotdot-directory-traversal(9748) patch vdb-entry vendor-advisory
- 5386 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1425 vendor-advisory