Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

geoip: path traversal

Package(s):

geoip

CVE #(s):

CVE-2007-0159

Created:

January 10, 2007

Updated:

January 24, 2007

Description:

Geoip fails to do sanity checking on returned filenames, opening up a path traversal vulnerability.

Alerts:

Ubuntu	USN-412-1	2007-01-23
Mandriva	MDKSA-2007:004	2007-01-08

(Log in to post comments)