John G. Myers MPack/MUnpack Malformed Filename Vulnerability
BID:5386
Info
John G. Myers MPack/MUnpack Malformed Filename Vulnerability
| Bugtraq ID: | 5386 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-1425 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 02 2002 12:00AM |
| Updated: | Jul 11 2009 02:56PM |
| Credit: | Discovery of this vulnerability credited to Herbert Xu. |
| Vulnerable: |
John G. Myers mpack 1.5 |
| Not Vulnerable: | |
Discussion
John G. Myers MPack/MUnpack Malformed Filename Vulnerability
A vulnerability has been reported for mpack/munpack 1.5. Reportedly, it is possible to cause munpack to create files outside of a designated directory. When mpack/munpack receives a MIME encoded message with an attachment that refers to a file, using a '../' sequence followed by the filename, it may decode the attachment outside of a designated directory.
A vulnerability has been reported for mpack/munpack 1.5. Reportedly, it is possible to cause munpack to create files outside of a designated directory. When mpack/munpack receives a MIME encoded message with an attachment that refers to a file, using a '../' sequence followed by the filename, it may decode the attachment outside of a designated directory.
References
John G. Myers MPack/MUnpack Malformed Filename Vulnerability
References:
References: