Lucene search
HistoryJan 27, 2005 - 5:00 a.m.
CVE-2004-0916
security
vulnerability
cabextract
directory traversal
cve-2004-0916
nvd
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.3%
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing … (dot dot) sequences in a filename.
References
Social References
More
Related
securityvulns
securityvulns
nessus
nessus
Debian DSA-574-1 : cabextract - missing directory sanitising
2004-11-10 00:00:00
FreeBSD : cabextract -- insecure directory handling (61480a9a-22b2-11d9-814e-0001020eed82)
2009-04-23 00:00:00
FreeBSD : cabextract -- insecure directory handling (22)
2004-10-20 00:00:00
cvelist
cvelist
CVE-2004-0916
2004-11-19 05:00:00
debian
debian
openvas
openvas
FreeBSD Ports: cabextract
2008-09-04 00:00:00
Debian: Security Advisory (DSA-574-1)
2008-01-17 00:00:00
FreeBSD Ports: cabextract
2008-09-04 00:00:00
debiancve
debiancve
CVE-2004-0916
2005-01-27 05:00:00
osv
osv
cabextract - missing directory sanitising
2004-10-28 00:00:00
freebsd
freebsd
cabextract -- insecure directory handling
2004-10-18 00:00:00
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.3%
Related for CVE-2004-0916