CVE-2018-1000161: nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against a malicious web site. This vulnerability appears to have been fixed in 7.7.
Please fix it.
testing migrations
This package will soon be part of the auto-openssl transition. You might want to ensure that your package is ready for it.
You can probably find supplementary information in the
debian-release
archives or in the corresponding
release.debian.org
bug.
Migration status for nmap (7.80+dfsg1-2 to 7.80+dfsg1-5): Waiting for test results, another package or too young (no action required now - check later)
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/nmap.png){kind=link}