Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
BID:71654
Info
Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
| Bugtraq ID: | 71654 |
| Class: | Design Error |
| CVE: |
CVE-2014-9356 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2014 12:00AM |
| Updated: | Apr 13 2015 10:22PM |
| Credit: | Tonis Tiigi |
| Vulnerable: |
Oracle Enterprise Linux 7 Docker Docker 1.3.2 |
| Not Vulnerable: |
Docker Docker 1.3.3 |
Discussion
Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
Docker is prone to multiple remote directory traversal vulnerabilities.
A remote attacker can use specially crafted requests with directory-traversal sequences ('../') to traverse directories.
Docker 1.3.2 is vulnerable; other versions may also be affected.
Docker is prone to multiple remote directory traversal vulnerabilities.
A remote attacker can use specially crafted requests with directory-traversal sequences ('../') to traverse directories.
Docker 1.3.2 is vulnerable; other versions may also be affected.
Exploit / POC
Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Docker CVE-2014-9356 Multiple Directory Traversal Vulnerabilities
References:
References: