CVE-2011-4675
The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (tilde) characters to home-directory pathnames but does not restrict use of these characters in strings received from the network,…
Does this matter?
Lower severity and a low EPSS score (3.11%). Track it; it rarely justifies an emergency change on its own.
Description
The pathname canonicalization functionality in io/filesystem/filesystem.cc in Widelands before 15.1 expands leading ~ (tilde) characters to home-directory pathnames but does not restrict use of these characters in strings received from the network, which might allow remote attackers to conduct absolute path traversal attacks and overwrite arbitrary files via a ~ in a pathname that is used for a file transfer in an Internet game, a different vulnerability than CVE-2011-1932.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 3.11% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- widelands/widelands
- Source
- cve@mitre.org
References
- http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021Patch, Release Notes, Third Party Advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617960Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71626Third Party Advisory, VDB Entry
- http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021Patch, Release Notes, Third Party Advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617960Issue Tracking, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71626Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.