CVE-2010-3842 Path traversal in n/a

Medium 5.8 Published 27 Oct 2010 Updated 7 Aug 2024

Remote servers can overwrite arbitrary files via path traversal in curl when using the remote-header-name option.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2010-3842?

CVE-2010-3842 is a medium-severity path traversal vulnerability in n/a, published on 27 Oct 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.

Weakness: CWE-22

Which versions are affected by CVE-2010-3842?

It affects 1 product.

Products include Curl Curl.

How do I fix CVE-2010-3842?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2010-3842 being exploited?

There is no known exploitation of CVE-2010-3842 in the wild and no public exploit code.

Sources

Also known as CURL-CVE-2010-3842, GHSA-fwfv-5xmw-xx69.