Directory Traversal Vulnerability in psensor
Summary
DLA-1361-1: psensor - security update. Affects psensor versions < 0.6.2.17-2+deb7u1. Fixed in 0.6.2.17-2+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
psensor is a server used for monitoring hardware sensors remotely. It allows users to monitor various aspects of their hardware, such as temperature, fan speed, and voltage. The server is designed to provide real-time data and alerts to users. However, a directory traversal vulnerability has been discovered in psensor, which could allow an attacker to access files outside of the webserver directory.
Vulnerability Detail
The vulnerability in psensor is due to a lack of proper file path validation in the create_response function of the server.c file. This allows an attacker to manipulate the file path and traverse directories outside of the intended webserver directory. By exploiting this vulnerability, an attacker could potentially access sensitive files on the system, leading to unauthorized disclosure of information or further compromise of the system.
How To Fix
Minimum fixed version
0.6.2.17-2+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade psensorTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the provided fix by upgrading psensor to the latest version.
Conclusion
The directory traversal vulnerability in psensor can be fixed by upgrading to the latest version. It is important to apply this fix to prevent unauthorized access to sensitive files on the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for psensor →
FAQ
psensor is a server for monitoring hardware sensors remotely. It provides real-time data and alerts for temperature, fan speed, and voltage.
A directory traversal vulnerability allows an attacker to access files outside of the intended directory. In this case, it allows an attacker to access files outside of the webserver directory.
By exploiting this vulnerability, an attacker could access sensitive files on the system, leading to unauthorized disclosure of information or further compromise of the system.
To fix this vulnerability, upgrade your psensor packages to version 0.6.2.17-2+deb7u1 or later.
There is no known workaround for this vulnerability. It is recommended to apply the provided fix by upgrading psensor to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for psensor.
