Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

A security flaw exists in the code shown below resulting from the absence of proper canonicalization measures on the file path. This allows an attacker to traverse the filesystem and possibly write to a file of his choice, with the privileges of the vulnerable program. For example, it maybe possible to overwrite /etc/passwd or a device file such as the mouse which in turn can aid further exploitation or cause a denial of service to occur.

...

Wiki Markup
An attacker can control the value of {{argv\[1\]}} and consequently access any resource on the filesystem.

...