geoip: path traversal

Package(s):

geoip

CVE #(s):

CVE-2007-0159

Created:

January 10, 2007

Updated:

January 24, 2007

Description:

Geoip fails to do sanity checking on returned filenames, opening up a path traversal vulnerability.

Alerts:

Ubuntu	USN-412-1	geoip	2007-01-23
Mandriva	MDKSA-2007:004	geoip	2007-01-08