NVD

Id
36150  
Name
CVE-2014-9447  
Description
Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / (slash) in a crafted archive, as demonstrated using the ar program.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-01-02  
Modified Date
2015-04-17  
Seq
2014-9447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184760 36150 CVE-2014-9447 http://advisories.mageia.org/MGASA-2015-0033.html  View
184761 36150 CVE-2014-9447 FEDORA-2015-0692  View
184762 36150 CVE-2014-9447 FEDORA-2015-0677  View
184763 36150 CVE-2014-9447 MDVSA-2015:047  View
184764 36150 CVE-2014-9447 [oss-security] 20141229 CVE request: dir traversal in elfutils  View
184765 36150 CVE-2014-9447 71804  View
184766 36150 CVE-2014-9447 https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e  View
184767 36150 CVE-2014-9447 [elfutils-devel] 20141227 Directory traversal in `ar`  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18615 JVNDB-2014-007490 elfutils の libelf/elf_begin.c の read_long_names 関数におけるディレクトリトラバーサルの脆弱性 elfutils の libelf/elf_begin.c の read_long_names 関数には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-9447 76740 CVE-2014-9447 36150 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007490.html 2014-12-28 2015-05-14 View