CVE-2010-1679: Path Traversal
Published Jan 11, 2011
·Updated
Directory traversal vulnerability in dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via directory traversal sequences in a patch for a source-format 3.0 package.
Affected Software
125 affected components
Debian Dpkg<=1.14.30
Debian Dpkg=1.9.19
Debian Dpkg=1.9.20
Debian Dpkg=1.9.21
Debian Dpkg=1.10
Debian Dpkg=1.10.1
Debian Dpkg=1.10.2
Debian Dpkg=1.10.3
Debian Dpkg=1.10.4
Debian Dpkg=1.10.5
Debian Dpkg=1.10.6
Debian Dpkg=1.10.7
Debian Dpkg=1.10.8
Debian Dpkg=1.10.9
Debian Dpkg=1.10.10
Debian Dpkg=1.10.11
Debian Dpkg=1.10.12
Debian Dpkg=1.10.13
Debian Dpkg=1.10.14
Debian Dpkg=1.10.15
Debian Dpkg=1.10.16
Debian Dpkg=1.10.17
Debian Dpkg=1.10.18
Debian Dpkg=1.10.18.1
Debian Dpkg=1.10.19
Debian Dpkg=1.10.20
Debian Dpkg=1.10.21
Debian Dpkg=1.10.22
Debian Dpkg=1.10.23
Debian Dpkg=1.10.24
Debian Dpkg=1.10.25
Debian Dpkg=1.10.26
Debian Dpkg=1.10.27
Debian Dpkg=1.10.28
Debian Dpkg=1.13.0
Debian Dpkg=1.13.1
Debian Dpkg=1.13.2
Debian Dpkg=1.13.3
Debian Dpkg=1.13.4
Debian Dpkg=1.13.5
Debian Dpkg=1.13.6
Debian Dpkg=1.13.7
Debian Dpkg=1.13.8
Debian Dpkg=1.13.9
Debian Dpkg=1.13.10
Debian Dpkg=1.13.11
Debian Dpkg=1.13.11.1
Debian Dpkg=1.13.12
Debian Dpkg=1.13.13
Debian Dpkg=1.13.14
Debian Dpkg=1.13.15
Debian Dpkg=1.13.16
Debian Dpkg=1.13.17
Debian Dpkg=1.13.18
Debian Dpkg=1.13.19
Debian Dpkg=1.13.20
Debian Dpkg=1.13.21
Debian Dpkg=1.13.22
Debian Dpkg=1.13.23
Debian Dpkg=1.13.24
Debian Dpkg=1.13.25
Debian Dpkg=1.14.0
Debian Dpkg=1.14.1
Debian Dpkg=1.14.2
Debian Dpkg=1.14.3
Debian Dpkg=1.14.4
Debian Dpkg=1.14.5
Debian Dpkg=1.14.6
Debian Dpkg=1.14.7
Debian Dpkg=1.14.8
Debian Dpkg=1.14.9
Debian Dpkg=1.14.10
Debian Dpkg=1.14.11
Debian Dpkg=1.14.12
Debian Dpkg=1.14.13
Debian Dpkg=1.14.14
Debian Dpkg=1.14.15
Debian Dpkg=1.14.16
Debian Dpkg=1.14.16.1
Debian Dpkg=1.14.16.2
Debian Dpkg=1.14.16.3
Debian Dpkg=1.14.16.4
Debian Dpkg=1.14.16.5
Debian Dpkg=1.14.16.6
Debian Dpkg=1.14.17
Debian Dpkg=1.14.18
Debian Dpkg=1.14.19
Debian Dpkg=1.14.20
Debian Dpkg=1.14.21
Debian Dpkg=1.14.22
Debian Dpkg=1.14.23
Debian Dpkg=1.14.24
Debian Dpkg=1.14.25
Debian Dpkg=1.14.26
Debian Dpkg=1.14.27
Debian Dpkg=1.14.28
Debian Dpkg=1.14.29
Debian Dpkg=1.15.0
Debian Dpkg=1.15.1
Debian Dpkg=1.15.2
Debian Dpkg=1.15.3
Debian Dpkg=1.15.3.1
Debian Dpkg=1.15.4
Debian Dpkg=1.15.4.1
Debian Dpkg=1.15.5
Debian Dpkg=1.15.5.1
Debian Dpkg=1.15.5.2
Debian Dpkg=1.15.5.3
Debian Dpkg=1.15.5.4
Debian Dpkg=1.15.5.5
Debian Dpkg=1.15.5.6
Debian Dpkg=1.15.6
Debian Dpkg=1.15.6.1
Debian Dpkg=1.15.7
Debian Dpkg=1.15.7.1
Debian Dpkg=1.15.7.2
Debian Dpkg=1.15.8
Debian Dpkg=1.15.8.1
Debian Dpkg=1.15.8.2
Debian Dpkg=1.15.8.3
Debian Dpkg=1.15.8.4
Debian Dpkg=1.15.8.5
Debian Dpkg=1.15.8.6
Debian Dpkg=1.15.8.7
Debian Dpkg=1.15.8.8
Event History
Jan 11, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1679?
CVE-2010-1679 has a moderate severity rating that allows remote attackers to manipulate files.
2
How do I fix CVE-2010-1679?
To fix CVE-2010-1679, upgrade dpkg to version 1.14.31 or later.
3
What versions of dpkg are affected by CVE-2010-1679?
CVE-2010-1679 affects dpkg versions prior to 1.14.31.
4
Can CVE-2010-1679 be exploited remotely?
Yes, CVE-2010-1679 can be exploited by remote attackers through user-assisted methods.
5
What types of attacks can CVE-2010-1679 facilitate?
CVE-2010-1679 can facilitate attacks that modify arbitrary files on the affected systems.