John G. Myers MPack/MUnpack畸形文件名漏洞

漏洞信息详情

John G. Myers MPack/MUnpack畸形文件名漏洞

• CNNVD编号：CNNVD-200304-097
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2002-1425
  
• 漏洞类型：
  
  
  路径遍历
  
• 发布时间：
  
  2003-04-11
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-05-13
  
• 厂        商：
  
  john_g._myers
• 漏洞来源：
  Discovery of this …

mpack 1.5及其早期版本的munpack存在目录遍历漏洞。远程攻击者可以借助文件名中抽取的../(点 点)序列在父目录中创建新文件。

Debian has released the following fixes:
John G. Myers mpack 1.5

• Debian mpack_1.5-5potato2_alpha.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_alpha.deb
• Debian mpack_1.5-5potato2_arm.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_arm.deb
• Debian mpack_1.5-5potato2_i386.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_i386.deb
• Debian mpack_1.5-5potato2_m68k.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_m68k.deb
• Debian mpack_1.5-5potato2_powerpc.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_powerpc.deb
• Debian mpack_1.5-5potato2_sparc.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-5potato
  2_sparc.deb
• Debian mpack_1.5-7woody2_alpha.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _alpha.deb
• Debian mpack_1.5-7woody2_arm.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _arm.deb
• Debian mpack_1.5-7woody2_hppa.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _hppa.deb
• Debian mpack_1.5-7woody2_i386.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _i386.deb
• Debian mpack_1.5-7woody2_ia64.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _ia64.deb
• Debian mpack_1.5-7woody2_m68k.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _m68k.deb
• Debian mpack_1.5-7woody2_mips.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _mips.deb
• Debian mpack_1.5-7woody2_mipsel.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _mipsel.deb
• Debian mpack_1.5-7woody2_powerpc.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _powerpc.deb
• Debian mpack_1.5-7woody2_s390.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _s390.deb
• Debian mpack_1.5-7woody2_sparc.deb
  
  http://security.debian.org/pool/updates/main/m/mpack/mpack_1.5-7woody2
  _sparc.deb

来源: BID
名称: 5386
链接:http://www.securityfocus.com/bid/5386

来源: XF
名称: munpack-dotdot-directory-traversal(9748)
链接:http://www.iss.net/security_center/static/9748.php

来源: DEBIAN
名称: DSA-141
链接:http://www.debian.org/security/2002/dsa-141