Directory Traversal Vulnerabilities in dpkg-source for Debian and Ubuntu
CVE-2014-3865
Currently unrated
What is CVE-2014-3865?
Multiple directory traversal vulnerabilities exist in the dpkg-source component of dpkg-dev 1.3.0, enabling remote attackers to manipulate files located outside of designated directories. This is achieved through a specially crafted source package containing an Index: pseudo-header that may lack critical header lines or include a blank pathname within the +++ header. Such exploits can allow unauthorized file modifications, posing serious security risks to affected systems.