CVE-2002-1425

Name	CVE-2002-1425
Description	Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-141

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mpack (PTS)	bullseye	1.6-17	fixed
	bookworm, sid, trixie	1.6-18	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
mpack	source	woody	1.5-7woody2		DSA-141
mpack	source	(unstable)	1.5-9