Path Traversal in Debian Dpkg

CVE-2010-0396

Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.

Affected products

Debian Dpkg — versions 1.10.15, 1.14.10, 1.10.18
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)