← voltar
CVE-2015-0557

CVE-2015-0557

EPSS 3.4%
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.htmlhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435https://security.gentoo.org/glsa/201612-15http://www.debian.org/security/2015/dsa-3213http://www.mandriva.com/security/advisories?name=MDVSA-2015:201http://www.openwall.com/lists/oss-security/2015/01/03/5http://www.openwall.com/lists/oss-security/2015/01/05/9http://www.securityfocus.com/bid/71895