dpkg Source Package Index: pseudo-header Processing Multiple Local Directory Traversal Vulnerability

Bugtraq ID:	67727
Class:	Input Validation Error
CVE:	CVE-2014-3865
Remote:	No
Local:	Yes
Published:	May 25 2014 12:00AM
Updated:	Apr 13 2015 09:38PM
Credit:	Raphael Geissert
Vulnerable:	Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Debian dpkg 1.3
Not Vulnerable:

dpkg Source Package Index: pseudo-header Processing Multiple Local Directory Traversal Vulnerability

dpkg is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues will allow local attackers to modify files outside the destination directory and possibly gain access to the system.

dpkg 1.3.0 is vulnerable; other versions may also be affected.

dpkg Source Package Index: pseudo-header Processing Multiple Local Directory Traversal Vulnerability

The following example example package data is available:

,--- exploit.patch ---
Index: index/symlink/index-file
@@ -0,0 +1,1 @@
+Escaped
`---

dpkg Source Package Index: pseudo-header Processing Multiple Local Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.