[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 5 Jan 2015 12:08:39 -0500 (EST)
From: "Steven M. Christey" <coley@...re.org>
To: Salvatore Bonaccorso <carnil@...ian.org>
cc: OSS Security Mailinglist <oss-security@...ts.openwall.com>,
CVE Assignments MITRE <cve-assign@...re.org>,
Jakub Wilk <jwilk@...ian.org>
Subject: Re: CVE Request: arj: symlink directory traversal and directory
traversal via //multiple/leading/slash
On Sat, 3 Jan 2015, Salvatore Bonaccorso wrote:
> arj: symlink directory traversal:
> - https://bugs.debian.org/774434
Use CVE-2015-0556.
> arj: directory traversal via //multiple/leading/slash:
> - https://bugs.debian.org/774435
Use CVE-2015-0557.
> Reproducers for both issues are also attached bot the corresponding
> bugs.
>
> Could you assign CVE(s) for these isues? (Are two ore one appropriate?
> It is the same reporter and similar kind of issue).
Two CVEs are used here.
While the bugs have the same technical impact - accessing files outside of
an intended directory - the root causes and vulnerability types are
different. 774434 does not handle when symlink destinations point outside
the directory. 774435 is a protection mechanism failure in which an
attempt is made to protect against directory traversal by removing a
leading slash, but not considering that there can be multiple leading
slashes.
---
CVE assignment team, MITRE CVE Numbering Authority M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
