Lucene search
MitreCVE-2006-3326HistoryJun 30, 2006 - 11:05 p.m.
CVE-2006-3326
2006-06-3023:05:00
mitre
web.nvd.nist.gov
21
cve-2006-3326
directory traversal
quickzip
vulnerability
remote attack
tar
gz
jar
overwrite
provenance
nvd
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.011
Percentile
84.6%
Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via … (dot dot) sequences in filenames within (1) TAR,(2) GZ, and (3) JAR archives. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
joesph_leungquickzipMatch3.06.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joesph_leung | quickzip | 3.06.3 | cpe:2.3:a:joesph_leung:quickzip:3.06.3:*:*:*:*:*:*:* |
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.011
Percentile
84.6%
Related for CVE-2006-3326