Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. (dot dot) or full pathname, a related issue to CVE-2010-1679.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU patch util.c目录遍历漏洞
Vulnerability Description
GNU patch2.6.1及之前版本中的util.c中存在目录遍历漏洞。由于没有正确处理补丁中的路径,用户协助的远程攻击者可以借助指定带有“..”或者完整路径名称的文件名称,创建或者覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A