CVE-2010-4651: Path Traversal
First published: Wed Jan 05 2011(Updated: )
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Patch | =2.5.4 | |
| GNU Patch | <=2.6.1 | |
| GNU Patch | =2.5.9 | |
| GNU Patch | =2.6 | |
| GNU Patch | =2.5 |
Remedy
http://git.savannah.gnu.org/cgit/patch.git/commit/?id=685a78b6052f4df6eac6d625a545cfb54a6ac0e1
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osdir.com/ml/bug-patch-gnu/2010-12/msg00000.html
- http://article.gmane.org/gmane.comp.security.oss.general/4063
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=667529#c1
- http://lists.gnu.org/archive/html/bug-patch/2010-12/msg00000.html
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=476361&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=476361&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=476365&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=476365&action=edit
- http://git.savannah.gnu.org/cgit/patch.git/commit/?id=685a78b6052f4df6eac6d625a545cfb54a6ac0e1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=675379
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=667529#c11
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=477393&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=477393&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=477460&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=477460&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=478038&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=478038&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=479566&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=479566&action=edit
- http://www.openembedded.org/index.php/Main_Page
- http://git.shr-project.org/git/?p=n900-oe.git;a=blob;f=recipes/db/files/db5-arm-thumb-mutex.patch;h=51b88823cf8ec1d959e1c73adb83abc4be4ae395;hb=9cd6a9dcdb323334186f0fe7c4537cd9dc8a58b1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=667529#c33
- https://access.redhat.com/security/updates/classification/
- https://bugzilla.redhat.com/show_bug.cgi?id=667529
- http://openwall.com/lists/oss-security/2011/01/06/19
- http://openwall.com/lists/oss-security/2011/01/05/10
- http://openwall.com/lists/oss-security/2011/01/06/20
- http://openwall.com/lists/oss-security/2011/01/06/21
- http://secunia.com/advisories/43677
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055241.html
- http://secunia.com/advisories/43663
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055246.html
- http://www.vupen.com/english/advisories/2011/0600
- http://support.apple.com/kb/HT4723
- http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
- http://www.securityfocus.com/bid/46768
Frequently Asked Questions
What is the severity of CVE-2010-4651?
CVE-2010-4651 has a medium severity rating due to the potential for remote attackers to exploit directory traversal vulnerabilities.
How do I fix CVE-2010-4651?
To fix CVE-2010-4651, update to GNU patch version 2.6.2 or later, which addresses this vulnerability.
What versions are affected by CVE-2010-4651?
CVE-2010-4651 affects GNU patch versions up to and including 2.6.1.
Can CVE-2010-4651 allow file overwriting?
Yes, CVE-2010-4651 allows an attacker to create or overwrite arbitrary files using a crafted filename.
Is CVE-2010-4651 user-assisted?
Yes, exploitation of CVE-2010-4651 requires user assistance to provide a specially crafted filename.
- collector/redhat-bugzilla
- alias/CVE-2010-4651
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/event
- agent/type
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/description
- vendor/gnu
- canonical/gnu patch
- version/gnu patch/2.5.4
- version/gnu patch/2.6.1
- version/gnu patch/2.5.9
- version/gnu patch/2.6
- version/gnu patch/2.5