Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated malicious user to supply directory traversal primitives and delete semi-arbitrary files.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
garrett ic_module_firmware 5.0 |
Vulmon