Directory Traversal Flaw in Dpkg by Debian and Related Distributions

CVE-2010-1679

Summary

The directory traversal vulnerability in dpkg allows remote attackers, aided by user interaction, to exploit malformed patch submissions for source-format 3.0 packages. By employing path traversal sequences, an attacker can alter potentially sensitive files, leading to unauthorized changes within the system. This vulnerability primarily impacts users that handle packages built using dpkg, creating a significant risk for system integrity and data confidentiality.

References