GNU patch CVE-2015-1396 Incomplete Fix Directory Traversal Vulnerability

Bugtraq ID:	75358
Class:	Input Validation Error
CVE:	CVE-2015-1396
Remote:	Yes
Local:	No
Published:	Jun 01 2015 12:00AM
Updated:	Jun 01 2015 12:00AM
Credit:	Jakub Wilk
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 GNU Patch 2.7.3 GNU Patch 2.7.1
Not Vulnerable:	GNU Patch 2.7.4

GNU patch CVE-2015-1396 Incomplete Fix Directory Traversal Vulnerability

GNU patch is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to overwrite arbitrary files in the context of the application. This may aid in further attacks.

Note: This issue is the result of an incomplete fix for the issue described in 72074 (GNU patch Directory Traversal Vulnerability).

GNU patch CVE-2015-1396 Incomplete Fix Directory Traversal Vulnerability

Attacker can exploit this issue using readily available tools.

GNU patch CVE-2015-1396 Incomplete Fix Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

GNU patch CVE-2015-1396 Incomplete Fix Directory Traversal Vulnerability

References:

• GNU patch Homepage (GNU)
  
• Bug 1186764 - (CVE-2015-1396) CVE-2015-1396 patch: directory traversal via symli (Red Hat Bugzilla)
  
• patch: CVE-2015-1396: another directory traversal via symlinks (Debian)