CVE

Id
73694  
CVE No.
CVE-2014-6394  
Status
Candidate  
Description
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory.  
Phase
Assigned (20140915)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
689793 73694 CVE-2014-6394 MLIST:[oss-security] 20140924 CVE request: various NodeJS module vulnerabilities  View
689794 73694 CVE-2014-6394 URL:http://www.openwall.com/lists/oss-security/2014/09/24/1  View
689795 73694 CVE-2014-6394 MLIST:[oss-security] 20140924 Re: CVE request: various NodeJS module vulnerabilities  View
689796 73694 CVE-2014-6394 URL:http://www.openwall.com/lists/oss-security/2014/09/30/10  View
689797 73694 CVE-2014-6394 MISC:https://github.com/visionmedia/send/pull/59  View
689798 73694 CVE-2014-6394 MISC:https://nodesecurity.io/advisories/send-directory-traversal  View
689799 73694 CVE-2014-6394 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1146063  View
689800 73694 CVE-2014-6394 CONFIRM:https://github.com/visionmedia/send/commit/9c6ca9b2c0b880afd3ff91ce0d211213c5fa5f9a  View
689801 73694 CVE-2014-6394 CONFIRM:https://support.apple.com/HT205217  View
689802 73694 CVE-2014-6394 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21687263  View
689803 73694 CVE-2014-6394 APPLE:APPLE-SA-2015-09-16-2  View
689804 73694 CVE-2014-6394 URL:http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html  View
689805 73694 CVE-2014-6394 FEDORA:FEDORA-2014-11289  View
689806 73694 CVE-2014-6394 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-September/139415.html  View
689807 73694 CVE-2014-6394 FEDORA:FEDORA-2014-11421  View
689808 73694 CVE-2014-6394 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140020.html  View
689809 73694 CVE-2014-6394 FEDORA:FEDORA-2014-11495  View
689810 73694 CVE-2014-6394 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139938.html  View
689811 73694 CVE-2014-6394 BID:70100  View
689812 73694 CVE-2014-6394 URL:http://www.securityfocus.com/bid/70100  View
689813 73694 CVE-2014-6394 SECUNIA:62170  View
689814 73694 CVE-2014-6394 URL:http://secunia.com/advisories/62170  View
689815 73694 CVE-2014-6394 XF:nodejs-cve20146394-dir-traversal(96727)  View

Related JVN