VulnerabilityModified
CVE-2002-1425
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
MEDIUM 6.4EPSS 1.88%
Does this matter?
Lower severity and a low EPSS score (1.88%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 1.88% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- john g. myers/mpack
- Source
- cve@mitre.org
References
- http://www.debian.org/security/2002/dsa-141Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9748.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/5386Patch, Vendor Advisory
- http://www.debian.org/security/2002/dsa-141Patch, Vendor Advisory
- http://www.iss.net/security_center/static/9748.phpPatch, Vendor Advisory
- http://www.securityfocus.com/bid/5386Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.