CVE-2014-0803

Directory traversal vulnerability in the tetra filer application 2.3.1 and earlier for Android 4.0.3, tetra filer free application 2.3.1 and earlier for Android 4.0.3, tetra filer application 1.5.1 and earlier for Android before 4.0.3, and tetra filer free application 1.5.1 and earlier for Android before 4.0.3 allows attackers to overwrite or create arbitrary files via unspecified vectors.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000002
http://jvn.jp/en/jp/JVN51285738/index.html
https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.app
https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.free

Advertisement

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:yuichiro_okuyama:tetra_filer::-:-::-:android::
	cpe:2.3:a:yuichiro_okuyama:tetra_filer_free::-:-::-:android::

OR	cpe:2.3:o:google:android:4.0.2:::::::*
	cpe:2.3:o:google:android:4.0:::::::*
	cpe:2.3:o:google:android:4.0.1:::::::*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:yuichiro_okuyama:tetra_filer_free::-:-::-:android::
	cpe:2.3:a:yuichiro_okuyama:tetra_filer::-:-::-:android::

cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*

Information

Published : 2014-01-12 10:34

Updated : 2014-01-13 11:47

NVD link : CVE-2014-0803

Mitre link : CVE-2014-0803

JSON object : View

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

Products Affected

yuichiro_okuyama

tetra_filer
tetra_filer_free

google

android

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000002", "name": "JVNDB-2014-000002", "tags": [], "refsource": "JVNDB"}, {"url": "http://jvn.jp/en/jp/JVN51285738/index.html", "name": "JVN#51285738", "tags": [], "refsource": "JVN"}, {"url": "https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.app", "name": "https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.app", "tags": [], "refsource": "CONFIRM"}, {"url": "https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.free", "name": "https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.free", "tags": [], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Directory traversal vulnerability in the tetra filer application 2.3.1 and earlier for Android 4.0.3, tetra filer free application 2.3.1 and earlier for Android 4.0.3, tetra filer application 1.5.1 and earlier for Android before 4.0.3, and tetra filer free application 1.5.1 and earlier for Android before 4.0.3 allows attackers to overwrite or create arbitrary files via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-0803", "ASSIGNER": "vultures@jpcert.or.jp"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-01-12T18:34Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:yuichiro_okuyama:tetra_filer:*:-:-:*:-:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.5.1"}, {"cpe23Uri": "cpe:2.3:a:yuichiro_okuyama:tetra_filer_free:*:-:-:*:-:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.5.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:yuichiro_okuyama:tetra_filer_free:*:-:-:*:-:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.3.1"}, {"cpe23Uri": "cpe:2.3:a:yuichiro_okuyama:tetra_filer:*:-:-:*:-:android:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.3.1"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2014-01-13T19:47Z"}