CVE-2010-0396: Path Traversal
Published Mar 12, 2010
·Updated
Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive.
Affected Software
95 affected components
Debian Dpkg=1.10.5
Debian Dpkg=1.13.20
Debian Dpkg=1.10.6
Debian Dpkg=1.14.4
Debian Dpkg=1.14.12
Debian Dpkg=1.9.20
Debian Dpkg=1.13.9
Debian Dpkg=1.14.23
Debian Dpkg=1.14.16.6
Debian Dpkg=1.13.11
Debian Dpkg=1.14.18
Debian Dpkg=1.14.21
Debian Dpkg=1.10
Debian Dpkg=1.10.15
Debian Dpkg=1.14.16.4
Debian Dpkg=1.10.1
Debian Dpkg=1.13.12
Debian Dpkg=1.10.4
Debian Dpkg=1.10.23
Debian Dpkg=1.14.7
Debian Dpkg=1.10.8
Debian Dpkg=1.10.18.1
Debian Dpkg=1.14.0
Debian Dpkg=1.13.13
Debian Dpkg=1.9.21
Debian Dpkg=1.14.17
Debian Dpkg=1.14.20
Debian Dpkg=1.10.21
Debian Dpkg=1.13.14
Debian Dpkg=1.10.22
Debian Dpkg=1.14.14
Debian Dpkg=1.14.19
Debian Dpkg=1.13.22
Debian Dpkg=1.10.3
Debian Dpkg=1.13.21
Debian Dpkg=1.13.4
Debian Dpkg=1.10.18
Debian Dpkg=1.13.23
Debian Dpkg=1.10.12
Debian Dpkg=1.13.17
Debian Dpkg=1.14.5
Debian Dpkg=1.13.6
Debian Dpkg=1.13.7
Debian Dpkg=1.10.28
Debian Dpkg=1.13.16
Debian Dpkg=1.10.17
Debian Dpkg=1.14.15
Debian Dpkg=1.10.14
Debian Dpkg=1.13.0
Debian Dpkg=1.14.8
Debian Dpkg=1.14.3
Debian Dpkg=1.14.11
Debian Dpkg=1.14.26
Debian Dpkg=1.14.16.1
Debian Dpkg=1.13.3
Debian Dpkg=1.14.6
Debian Dpkg=1.13.11.1
Debian Dpkg=1.10.11
Debian Dpkg=1.10.27
Debian Dpkg=1.13.15
Debian Dpkg=1.14.24
Debian Dpkg=1.13.18
Debian Dpkg=1.14.16.2
Debian Dpkg=1.13.24
Debian Dpkg=1.14.9
Debian Dpkg=1.9.19
Debian Dpkg=1.14.27
Debian Dpkg=1.13.8
Debian Dpkg=1.10.24
Debian Dpkg=1.13.1
Debian Dpkg=1.10.10
Debian Dpkg=1.13.5
Debian Dpkg=1.13.25
Debian Dpkg=1.14.16.5
Debian Dpkg=1.13.10
Debian Dpkg=1.10.26
Debian Dpkg=1.10.2
Debian Dpkg=1.14.16
Debian Dpkg=1.10.9
Debian Dpkg=1.14.22
Debian Dpkg=1.13.19
Debian Dpkg=1.13.2
Debian Dpkg=1.10.13
Debian Dpkg=1.14.1
Debian Dpkg=1.10.16
Debian Dpkg=1.14.10
Debian Dpkg=1.14.25
Debian Dpkg=1.10.7
Debian Dpkg=1.10.20
Debian Dpkg=1.10.19
Debian Dpkg=1.14.2
Debian Dpkg<=1.14.28
Debian Dpkg=1.14.13
Debian Dpkg=1.14.16.3
Debian Dpkg=1.10.25
Remediation
Patch Available
Event History
Mar 12, 2010
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Mar 15, 2010
Data Sourced
via NVD·01:28 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0396?
The severity of CVE-2010-0396 is classified as high due to potential remote file modification.
2
How do I fix CVE-2010-0396?
To fix CVE-2010-0396, upgrade your dpkg package to version 1.14.29 or later.
3
What are the affected versions for CVE-2010-0396?
CVE-2010-0396 affects dpkg versions prior to 1.14.29.
4
Can CVE-2010-0396 be exploited remotely?
Yes, CVE-2010-0396 can be exploited remotely through crafted Debian source archives.
5
What is a directory traversal vulnerability like CVE-2010-0396?
A directory traversal vulnerability like CVE-2010-0396 allows attackers to access files outside the intended directory structure.