SecuritySpace - CVE-2014-9358

Vulnerability Search		Search 219043 CVE descriptions and 99761 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2014-9358

Description: Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-9358
Bugtraq: 20141212 Docker 1.3.3 - Security Advisory [11 Dec 2014] (Google Search)
http://www.securityfocus.com/archive/1/534215/100/0/threaded

CVE ID:	CVE-2014-9358
Description:	Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "docker load" operation or (2) "registry communications."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9358 Bugtraq: 20141212 Docker 1.3.3 - Security Advisory [11 Dec 2014] (Google Search) http://www.securityfocus.com/archive/1/534215/100/0/threaded