Security Advisory

CVE-2015-1395

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-08-25 18:00:00

Last updated 2024-08-06 04:40:18

Assigner debian

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. (dot dot) in a diff file name.

← Browse all CVEs View on cve.org ↗