A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.
Advisories
Source ID Title
EUVD EUVD EUVD-2015-1533 A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.
Ubuntu USN Ubuntu USN USN-2651-1 GNU patch vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: debian

Published:

Updated: 2024-08-06T04:40:18.555Z

Reserved: 2015-01-27T00:00:00

Link: CVE-2015-1396

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-11-25T16:15:12.817

Modified: 2024-11-21T02:25:20.730

Link: CVE-2015-1396

cve-icon Redhat

Severity : Moderate

Publid Date: 2015-01-24T00:00:00Z

Links: CVE-2015-1396 - Bugzilla

cve-icon OpenCVE Enrichment

No data.