NetSight
IP …
critical9.8

CVE-2009-4013

Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwri…

Impact

Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive information via vectors involving (1) control field names, (2) control field values, and (3) control files of patch systems.

Affected products

VendorProductAffected versions
DebianLintian
from 1.23.0 through 1.23.28
from 1.24.0 through 1.24.2.1
from 2.0.0 before 2.3.2
DebianDebian Linux
Versions 4.0, 5.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04, 9.10

Weakness classification

CWE-22

References