Description
mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory.
References
- 19990928 mirror 2.9 hole mailing-list
- 681 vdb-entry
- 19991001 Security hole in mirror vendor-advisory
- 19991018 Incorrect directory name handling in mirror vendor-advisory