CVE-2014-10073: Path Traversal
Published Apr 20, 2018
·Updated
The createresponse function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the webserver directory.
Affected Software
2 affected components
Wpitchoune Psensor<1.1.4
Debian Debian Linux=7.0
Remediation
Event History
Apr 20, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-10073?
CVE-2014-10073 is considered a medium severity vulnerability due to its exploitation potential for directory traversal.
2
How do I fix CVE-2014-10073?
To fix CVE-2014-10073, upgrade Psensor to version 1.1.4 or later, which addresses the directory traversal issue.
3
What systems are affected by CVE-2014-10073?
CVE-2014-10073 affects Psensor versions prior to 1.1.4 and Debian GNU/Linux version 7.0.
4
Can CVE-2014-10073 lead to unauthorized access?
Yes, CVE-2014-10073 can potentially allow unauthorized access to files outside the intended webserver directory.
5
What is the root cause of CVE-2014-10073?
The root cause of CVE-2014-10073 is the lack of validation in the create_response function that allows directory traversal.