Package: hoz
Version: 1.65-1
Severity: grave
Tags: security
Justification: user security hole
Pasting a file doesn't check whether internal filename uses a path, allowing a
modified header to write out of output directory.
Example:
Modified header:
?????^...?????../home/user/file?????12387?????123123?????...
(internal filename: ../home/user/file)
User executes:
hoz --paste --outpath /tmp file.0
Result:
A new file in /home/user/, not in /tmp
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-k7
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Versions of packages hoz depends on:
ii libc6 2.3.6.ds1-13etch7 GNU C Library: Shared libraries
hoz recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
