CVE-2011-2725

2014-02-0423:55:00

CWE-22

[email protected]

web.nvd.nist.gov

ark

vulnerability

directory traversal

remote attackers

zip file

nvd

6.5 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.7%

JSON

Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via … (dot dot) sequences in a zip file.

CPENameOperatorVersion
kde:kde_sckde kde scle4.7.4
kde:kde_sckde kde sceq4.7.0
kde:kde_sckde kde sceq4.7.3
kde:kde_sckde kde sceq4.7.1
kde:kde_sckde kde sceq4.7.2
kde:arkkde arkle2.17
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq11.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq11.10
opensuse:opensuseopensuseeq11.4

CPE	Name	Operator	Version
kde:kde_sc	kde kde sc	le	4.7.4
kde:kde_sc	kde kde sc	eq	4.7.0
kde:kde_sc	kde kde sc	eq	4.7.3
kde:kde_sc	kde kde sc	eq	4.7.1
kde:kde_sc	kde kde sc	eq	4.7.2
kde:ark	kde ark	le	2.17
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	11.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	11.10
opensuse:opensuse	opensuse	eq	11.4