CVE-2011-1572

2011-10-04 12:55:09 2019-09-09 20:02:34

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Gitolite Gitolite 1.5.9 (not an official CPE) Gitolite Gitolite 1.5.8 (not an official CPE) Gitolite Gitolite 1.5.7 (not an official CPE) Gitolite Gitolite 1.5.5 (not an official CPE) Gitolite Gitolite 1.5.6 (not an official CPE) Gitolite Gitolite 1.5.4 (not an official CPE) Gitolite Gitolite 1.5.3 (not an official CPE) Gitolite Gitolite 1.5.2 (not an official CPE) Gitolite Gitolite 1.5.1 (not an official CPE) Gitolite Gitolite 1.5 (not an official CPE) Gitolite Gitolite 1.4.2 (not an official CPE) Gitolite Gitolite 1.4.1 (not an official CPE) Gitolite Gitolite 1.4 (not an official CPE) Gitolite Gitolite 1.3 (not an official CPE) Gitolite Gitolite 1.2 (not an official CPE) Gitolite Gitolite 1.1 (not an official CPE) Gitolite Gitolite 1.0 Rc1 (not an official CPE) Gitolite Gitolite 1.0 (not an official CPE) Gitolite Gitolite 0.95 (not an official CPE) Gitolite Gitolite 0.90 (not an official CPE) Gitolite Gitolite 0.85 (not an official CPE) Gitolite Gitolite 0.80 (not an official CPE) Gitolite Gitolite 0.70 (not an official CPE) Gitolite Gitolite 0.65 (not an official CPE) Gitolite Gitolite 0.60 (not an official CPE) Gitolite Gitolite 0.55 (not an official CPE) Gitolite Gitolite 0.50 (not an official CPE)

Gitolite - Gitolite

Advisory	Patch	Confirmed	Link
			https://github.com/sitaramc/gitolite/commit/4ce00aef84d1...
			https://bugzilla.redhat.com/show_bug.cgi?id=695568
			46473
			DSA-2215
			[oss-security] 20110409 CVE id request: gitolite
			[oss-security] 20110411 Re: CVE id request: gitolite
			http://groups.google.com/group/gitolite/browse_thread/th...
			gitolite-adc-security-bypass(65542)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)