Published: 21/01/2015 Updated: 30/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

GNU patch 2.7.1 allows remote malicious users to write to arbitrary files via a symlink attack in a patch file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
opensuse opensuse 13.2
opensuse opensuse 13.1
oracle solaris 11.2
gnu patch 2.7.1

Several security issues were fixed in GNU patch ...

Debian Bug report logs - #775227 patch: CVE-2015-1196: directory traversal via symlinks Package: patch; Maintainer for patch is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for patch is src:patch (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> Date: Mon, 12 Jan 2015 19:27:02 UTC Severity: norma ...

Debian Bug report logs - #775873 patch: CVE-2015-1395: directory traversal via file rename Package: patch; Maintainer for patch is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for patch is src:patch (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> Date: Tue, 20 Jan 2015 22:51:01 UTC Severity: gr ...

Debian Bug report logs - #775901 patch: CVE-2015-1396: another directory traversal via symlinks Package: patch; Maintainer for patch is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for patch is src:patch (PTS, buildd, popcon) Reported by: Jakub Wilk <jwilk@debianorg> Date: Wed, 21 Jan 2015 10:42:06 UTC Severit ...

GNU patch 271 allows remote attackers to write to arbitrary files via a symlink attack in a patch file ...

CWE-59 https://bugzilla.redhat.com/show_bug.cgi?id=1182154 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227 http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3 http://seclists.org/oss-sec/2015/q1/173 http://www.securityfocus.com/bid/72074 http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html https://exchange.xforce.ibmcloud.com/vulnerabilities/99967 https://usn.ubuntu.com/2651-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-1196

CVE-2015-1196

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect