CVE-2016-9956 The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/flightgear(Debian:12) | < 1:2016.4.3+dfsg-1 | 1:2016.4.3+dfsg-1 |
| debian/flightgear(Debian:13) | < 1:2016.4.3+dfsg-1 | 1:2016.4.3+dfsg-1 |
| debian linux | = 8.0 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
| flightgear | <= 2016.4.3 | No fix listed |
References
- Debian Security Tracker CVE-2016-9956 vendor-advisory
- DSA-3742 third-party-advisory vendor-advisory
- [oss-security] 20161214 CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list patch third-party-advisory
- [oss-security] 20161215 Re: CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list patch third-party-advisory
- [oss-security] 20161216 Re: CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list third-party-advisory
- 94945 third-party-advisory vdb-entry
- FEDORA-2016-01eba63bcc vendor-advisory
- FEDORA-2016-a1f774c3d7 vendor-advisory
- sourceforge.net issue-tracking patch third-party-advisory
- sourceforge.net patch release-notes third-party-advisory
- USN-4588-1 vendor-advisory
- bugs.debian.org issue-tracking