Lucene search

K
cveMitreCVE-2006-0926
HistoryFeb 28, 2006 - 11:02 a.m.

CVE-2006-0926

2006-02-2811:02:00
mitre
web.nvd.nist.gov
27
cve-2006-0926
allume
zipmagic
directory traversal
vulnerability
remote attack
crafted pathnames
archive

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.039

Percentile

92.0%

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.

Affected configurations

Nvd
Node
smithmicrostuffit_deluxeMatch9.0
OR
smithmicrostuffit_expanderMatch9.0.0.21_engine_9.0.0.21
OR
smithmicrostuffit_standardMatch9.0
OR
smithmicrozipmagic_deluxeMatch9.0
VendorProductVersionCPE
smithmicrostuffit_deluxe9.0cpe:2.3:a:smithmicro:stuffit_deluxe:9.0:*:*:*:*:*:*:*
smithmicrostuffit_expander9.0.0.21_engine_9.0.0.21cpe:2.3:a:smithmicro:stuffit_expander:9.0.0.21_engine_9.0.0.21:*:*:*:*:*:*:*
smithmicrostuffit_standard9.0cpe:2.3:a:smithmicro:stuffit_standard:9.0:*:*:*:*:*:*:*
smithmicrozipmagic_deluxe9.0cpe:2.3:a:smithmicro:zipmagic_deluxe:9.0:*:*:*:*:*:*:*

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

7

Confidence

Low

EPSS

0.039

Percentile

92.0%

Related for CVE-2006-0926