Critical severity · published Feb 2, 2010
CVE-2009-4013
Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files…
9.8
CVSS
5.8%
EPSS
No
On KEV
Description
Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive information via vectors involving (1) control field names, (2) control field values, and (3) control files of patch systems.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
4.0; 5.0 · source: NVD
LI
Lintian · Debian
1.23.0 through 1.23.28; 1.24.0 through 1.24.2.1; 2.0.0 before 2.3.2 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 8.04; 8.10; 9.04; 9.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4013
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4013
Broken Link
http://git.debian.org/?p=lintian/lintian.git%3Ba=commit%3Bh=c8d01f062b3e5137cf65196760b079a855c75e00
Broken Link
http://git.debian.org/?p=lintian/lintian.git%3Ba=commit%3Bh=fbe0c92b2ef7e360d13414bf40d6af5507d0c86d
Broken Link
http://packages.debian.org/changelogs/pool/main/l/lintian/lintian_2.3.2/changelog
Mailing List
http://packages.qa.debian.org/l/lintian/news/20100128T015554Z.html
Broken Link
http://secunia.com/advisories/38375
Broken Link
http://secunia.com/advisories/38379
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation