CVE-2007-2058

CVE-2007-2058

EPSS 1.3%

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/24868 https://exchange.xforce.ibmcloud.com/vulnerabilities/33639 http://www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9 http://www.securityfocus.com/bid/23471 http://www.vupen.com/english/advisories/2007/1377