CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

redhat·CWE-59·Published 2015-01-21

CVSS

—

EPSS

0.06

KEV

Exploits

cve.orgen

105 chars

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

NVDen

105 chars

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

NVDes

150 chars

El parche de GNU 2.7.1 permite a atacantes remotos escribir a ficheros arbitrarios a través de un ataque de enlace simbólico en un fichero del parche.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N