CVE-2009-4013
🟠 Łataj w tym tygodniu
Wielokrotne luki w Lintian umożliwiają zdalnym atakującym nadpisywanie plików i pozyskiwanie danych.
CVSS
9.8
EPSS
0.8%
Exploit
none
Vendor
canonical
Opis źródłowy (NVD)
Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive information via vectors involving (1) control field names, (2) control field values, and (3) control files of patch systems.
path-traversal
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 9.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.8% |
| Opublikowano (NVD) | 2010-02-02 16:30:02 UTC |
| Ostatnia modyfikacja (NVD) | 2026-04-29 01:13:23 UTC |
Referencje
- http://git.debian.org/?p=lintian/lintian.git%3Ba=commit%3Bh=c8d01f062b3e5137cf65196760b079a855c75e00 (cve@mitre.org) [Broken Link]
- http://git.debian.org/?p=lintian/lintian.git%3Ba=commit%3Bh=fbe0c92b2ef7e360d13414bf40d6af5507d0c86d (cve@mitre.org) [Broken Link]
- http://packages.debian.org/changelogs/pool/main/l/lintian/lintian_2.3.2/changelog (cve@mitre.org) [Broken Link]
- http://packages.qa.debian.org/l/lintian/news/20100128T015554Z.html (cve@mitre.org) [Mailing List, Patch]
- http://secunia.com/advisories/38375 (cve@mitre.org) [Broken Link, Vendor Advisory]
- http://secunia.com/advisories/38379 (cve@mitre.org) [Broken Link, Vendor Advisory]
- http://www.debian.org/security/2010/dsa-1979 (cve@mitre.org) [Third Party Advisory]
- http://www.securityfocus.com/bid/37975 (cve@mitre.org) [Broken Link, Patch, Third Party Advisory, VDB Entry]
- http://www.ubuntu.com/usn/USN-891-1 (cve@mitre.org) [Third Party Advisory]