Lucene search

K
cve[email protected]CVE-2001-1271
HistoryMay 03, 2002 - 4:00 a.m.

CVE-2001-1271

2002-05-0304:00:00
web.nvd.nist.gov
25
security
vulnerabilities
rar 2.02
archive extraction
directory traversal
attack
cve-2001-1271

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.9%

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a … (dot dot) attack on archived filenames.

Affected configurations

NVD
Node
rarsoftrarRange2.02
CPENameOperatorVersion
rarsoft:rarrarsoft rarle2.02

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.9%

Related for CVE-2001-1271