CVE-2011-0402: Medium severity dpkg-dev vulnerability
Published Jan 11, 2011
·Updated
dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory.
Affected Software
125 affected components
Debian Dpkg<=1.14.30
Debian Dpkg=1.9.19
Debian Dpkg=1.9.20
Debian Dpkg=1.9.21
Debian Dpkg=1.10
Debian Dpkg=1.10.1
Debian Dpkg=1.10.2
Debian Dpkg=1.10.3
Debian Dpkg=1.10.4
Debian Dpkg=1.10.5
Debian Dpkg=1.10.6
Debian Dpkg=1.10.7
Debian Dpkg=1.10.8
Debian Dpkg=1.10.9
Debian Dpkg=1.10.10
Debian Dpkg=1.10.11
Debian Dpkg=1.10.12
Debian Dpkg=1.10.13
Debian Dpkg=1.10.14
Debian Dpkg=1.10.15
Debian Dpkg=1.10.16
Debian Dpkg=1.10.17
Debian Dpkg=1.10.18
Debian Dpkg=1.10.18.1
Debian Dpkg=1.10.19
Debian Dpkg=1.10.20
Debian Dpkg=1.10.21
Debian Dpkg=1.10.22
Debian Dpkg=1.10.23
Debian Dpkg=1.10.24
Debian Dpkg=1.10.25
Debian Dpkg=1.10.26
Debian Dpkg=1.10.27
Debian Dpkg=1.10.28
Debian Dpkg=1.13.0
Debian Dpkg=1.13.1
Debian Dpkg=1.13.2
Debian Dpkg=1.13.3
Debian Dpkg=1.13.4
Debian Dpkg=1.13.5
Debian Dpkg=1.13.6
Debian Dpkg=1.13.7
Debian Dpkg=1.13.8
Debian Dpkg=1.13.9
Debian Dpkg=1.13.10
Debian Dpkg=1.13.11
Debian Dpkg=1.13.11.1
Debian Dpkg=1.13.12
Debian Dpkg=1.13.13
Debian Dpkg=1.13.14
Debian Dpkg=1.13.15
Debian Dpkg=1.13.16
Debian Dpkg=1.13.17
Debian Dpkg=1.13.18
Debian Dpkg=1.13.19
Debian Dpkg=1.13.20
Debian Dpkg=1.13.21
Debian Dpkg=1.13.22
Debian Dpkg=1.13.23
Debian Dpkg=1.13.24
Debian Dpkg=1.13.25
Debian Dpkg=1.14.0
Debian Dpkg=1.14.1
Debian Dpkg=1.14.2
Debian Dpkg=1.14.3
Debian Dpkg=1.14.4
Debian Dpkg=1.14.5
Debian Dpkg=1.14.6
Debian Dpkg=1.14.7
Debian Dpkg=1.14.8
Debian Dpkg=1.14.9
Debian Dpkg=1.14.10
Debian Dpkg=1.14.11
Debian Dpkg=1.14.12
Debian Dpkg=1.14.13
Debian Dpkg=1.14.14
Debian Dpkg=1.14.15
Debian Dpkg=1.14.16
Debian Dpkg=1.14.16.1
Debian Dpkg=1.14.16.2
Debian Dpkg=1.14.16.3
Debian Dpkg=1.14.16.4
Debian Dpkg=1.14.16.5
Debian Dpkg=1.14.16.6
Debian Dpkg=1.14.17
Debian Dpkg=1.14.18
Debian Dpkg=1.14.19
Debian Dpkg=1.14.20
Debian Dpkg=1.14.21
Debian Dpkg=1.14.22
Debian Dpkg=1.14.23
Debian Dpkg=1.14.24
Debian Dpkg=1.14.25
Debian Dpkg=1.14.26
Debian Dpkg=1.14.27
Debian Dpkg=1.14.28
Debian Dpkg=1.14.29
Debian Dpkg=1.15.0
Debian Dpkg=1.15.1
Debian Dpkg=1.15.2
Debian Dpkg=1.15.3
Debian Dpkg=1.15.3.1
Debian Dpkg=1.15.4
Debian Dpkg=1.15.4.1
Debian Dpkg=1.15.5
Debian Dpkg=1.15.5.1
Debian Dpkg=1.15.5.2
Debian Dpkg=1.15.5.3
Debian Dpkg=1.15.5.4
Debian Dpkg=1.15.5.5
Debian Dpkg=1.15.5.6
Debian Dpkg=1.15.6
Debian Dpkg=1.15.6.1
Debian Dpkg=1.15.7
Debian Dpkg=1.15.7.1
Debian Dpkg=1.15.7.2
Debian Dpkg=1.15.8
Debian Dpkg=1.15.8.1
Debian Dpkg=1.15.8.2
Debian Dpkg=1.15.8.3
Debian Dpkg=1.15.8.4
Debian Dpkg=1.15.8.5
Debian Dpkg=1.15.8.6
Debian Dpkg=1.15.8.7
Debian Dpkg=1.15.8.8
Event History
Jan 11, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0402?
CVE-2011-0402 has a moderate severity rating due to its potential for exploitation through a symlink attack.
2
How do I fix CVE-2011-0402?
To fix CVE-2011-0402, upgrade your dpkg software to version 1.14.31 or later.
3
Who is affected by CVE-2011-0402?
CVE-2011-0402 affects users running dpkg versions prior to 1.14.31 and those in 1.15.x series.
4
What kind of attack does CVE-2011-0402 involve?
CVE-2011-0402 involves a symlink attack that allows user-assisted remote attackers to manipulate files.
5
Is there a workaround for CVE-2011-0402?
Currently, the best workaround for CVE-2011-0402 is to update to a patched version of dpkg.