Path Traversal in Widelands

CVE-2011-1932

Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname that is used for a file transfer in an Internet game.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.018 (76.2th percentile) — read the EPSS interpretation.

Affected products

Widelands
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

secalert@redhat.com (x_refsource_CONFIRM, Patch, Third Party Advisory, Release Notes)
secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)