Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2015-1196 Details

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3	CVE	Patch
http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html	CVE	Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227	CVE	Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1182154	CVE	Issue TrackingThird Party AdvisoryVDB Entry
http://seclists.org/oss-sec/2015/q1/173	CVE	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99967	CVE
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/72074	CVE	Third Party Advisory
http://git.savannah.gnu.org/cgit/patch.git/commit/?id=4e9269a5fc1fe80a1095a92593dd85db871e1fd3	[email protected]	Patch
http://lists.opensuse.org/opensuse-updates/2015-02/msg00013.html	[email protected]	Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775227	[email protected]	Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=1182154	[email protected]	Issue TrackingThird Party AdvisoryVDB Entry
http://seclists.org/oss-sec/2015/q1/173	[email protected]	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99967	[email protected]
http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/72074	[email protected]	Third Party Advisory

CWE-ID	CWE Name	Source
CWE-59	Improper Link Resolution Before File Access ('Link Following')	[email protected]

Product	Versions
opensuse opensuse	13.1 13.2
CPE cpe:2.3:o:opensuse:opensuse:13.1:::::::* cpe:2.3:o:opensuse:opensuse:13.2:::::::* Remediation No remediation found in references.
oracle solaris	11.2
CPE cpe:2.3:o:oracle:solaris:11.2:::::::* Remediation No remediation found in references.
gnu patch	2.7.1
CPE cpe:2.3:a:gnu:patch:2.7.1:::::::* Remediation No remediation found in references.

14 change records found show changes

QUICK INFO