Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for docbook_utils by redhat

    CVE-2002-0169 (GCVE-0-2002-0169)

    Vulnerability from cvelistv5 – Published: 2003-04-02 05:00 – Updated: 2024-08-08 02:42
    VLAI
    Summary
    The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/4654 vdb-entryx_refsource_BID
    http://www.iss.net/security_center/static/8983.php vdb-entryx_refsource_XF
    http://www.redhat.com/support/errata/RHSA-2002-062.html vendor-advisoryx_refsource_REDHAT
    http://www.osvdb.org/5349 vdb-entryx_refsource_OSVDB
    http://online.securityfocus.com/advisories/4095 vendor-advisoryx_refsource_HP
    Date Public
    2002-05-01 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T02:42:27.917Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "4654",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/4654"
              },
              {
                "name": "linux-docbook-stylesheet-insecure(8983)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "http://www.iss.net/security_center/static/8983.php"
              },
              {
                "name": "RHSA-2002:062",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
              },
              {
                "name": "5349",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/5349"
              },
              {
                "name": "HPSBTL0205-038",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_HP",
                  "x_transferred"
                ],
                "url": "http://online.securityfocus.com/advisories/4095"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2002-05-01T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2002-08-17T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "4654",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/4654"
            },
            {
              "name": "linux-docbook-stylesheet-insecure(8983)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "http://www.iss.net/security_center/static/8983.php"
            },
            {
              "name": "RHSA-2002:062",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
            },
            {
              "name": "5349",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/5349"
            },
            {
              "name": "HPSBTL0205-038",
              "tags": [
                "vendor-advisory",
                "x_refsource_HP"
              ],
              "url": "http://online.securityfocus.com/advisories/4095"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2002-0169",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "4654",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/4654"
                },
                {
                  "name": "linux-docbook-stylesheet-insecure(8983)",
                  "refsource": "XF",
                  "url": "http://www.iss.net/security_center/static/8983.php"
                },
                {
                  "name": "RHSA-2002:062",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
                },
                {
                  "name": "5349",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/5349"
                },
                {
                  "name": "HPSBTL0205-038",
                  "refsource": "HP",
                  "url": "http://online.securityfocus.com/advisories/4095"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2002-0169",
        "datePublished": "2003-04-02T05:00:00.000Z",
        "dateReserved": "2002-04-11T00:00:00.000Z",
        "dateUpdated": "2024-08-08T02:42:27.917Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2002-0169 (GCVE-0-2002-0169)

    Vulnerability from nvd – Published: 2003-04-02 05:00 – Updated: 2024-08-08 02:42
    VLAI
    Summary
    The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/4654 vdb-entryx_refsource_BID
    http://www.iss.net/security_center/static/8983.php vdb-entryx_refsource_XF
    http://www.redhat.com/support/errata/RHSA-2002-062.html vendor-advisoryx_refsource_REDHAT
    http://www.osvdb.org/5349 vdb-entryx_refsource_OSVDB
    http://online.securityfocus.com/advisories/4095 vendor-advisoryx_refsource_HP
    Date Public
    2002-05-01 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T02:42:27.917Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "4654",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/4654"
              },
              {
                "name": "linux-docbook-stylesheet-insecure(8983)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "http://www.iss.net/security_center/static/8983.php"
              },
              {
                "name": "RHSA-2002:062",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
                  "x_transferred"
                ],
                "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
              },
              {
                "name": "5349",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/5349"
              },
              {
                "name": "HPSBTL0205-038",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_HP",
                  "x_transferred"
                ],
                "url": "http://online.securityfocus.com/advisories/4095"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2002-05-01T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2002-08-17T00:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "4654",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/4654"
            },
            {
              "name": "linux-docbook-stylesheet-insecure(8983)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "http://www.iss.net/security_center/static/8983.php"
            },
            {
              "name": "RHSA-2002:062",
              "tags": [
                "vendor-advisory",
                "x_refsource_REDHAT"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
            },
            {
              "name": "5349",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/5349"
            },
            {
              "name": "HPSBTL0205-038",
              "tags": [
                "vendor-advisory",
                "x_refsource_HP"
              ],
              "url": "http://online.securityfocus.com/advisories/4095"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2002-0169",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "4654",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/4654"
                },
                {
                  "name": "linux-docbook-stylesheet-insecure(8983)",
                  "refsource": "XF",
                  "url": "http://www.iss.net/security_center/static/8983.php"
                },
                {
                  "name": "RHSA-2002:062",
                  "refsource": "REDHAT",
                  "url": "http://www.redhat.com/support/errata/RHSA-2002-062.html"
                },
                {
                  "name": "5349",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/5349"
                },
                {
                  "name": "HPSBTL0205-038",
                  "refsource": "HP",
                  "url": "http://online.securityfocus.com/advisories/4095"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2002-0169",
        "datePublished": "2003-04-02T05:00:00.000Z",
        "dateReserved": "2002-04-11T00:00:00.000Z",
        "dateUpdated": "2024-08-08T02:42:27.917Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }