Info-ZIP UnZip 5.50 - Encoded Character Hostile Destination Path
| Reporter | Title | Published | Views | Family All 25 |
|---|---|---|---|---|
 | Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the integrity of protected information | 28 Apr 201500:00 | – | bdu_fstec |
 | CAN-2003-0282 | 6 Aug 202410:31 | – | cve |
| CVE-2003-0282 | 14 May 200304:00 | – | cve |
 | CVE-2003-0282 | 27 Nov 202321:33 | – | circl |
 | CVE-2003-0282 | 14 May 200304:00 | – | cvelist |
 | [SECURITY] [DSA-344-1] New unzip packages fix directory traversal | 8 Jul 200323:49 | – | debian |
| [SECURITY] [DSA-344-2] New unzip packages fix directory traversal vulnerability | 26 Aug 200304:53 | – | debian |
 | CVE-2003-0282 | 14 May 200304:00 | – | debiancve |
 | Debian DSA-344-2 : unzip - directory traversal | 29 Sep 200400:00 | – | nessus |
| Mandrake Linux Security Advisory : unzip (MDKSA-2003:073-1) | 31 Jul 200400:00 | – | nessus |
10
source: https://www.securityfocus.com/bid/7550/info
Info-ZIP UnZip contains a vulnerability during the handling of pathnames for archived files. Specifically, when certain encoded characters are inserted into '../' directory traversal sequences, the creator of the archive can cause the file to be extracted to arbitrary locations on the filesystem - including paths containing system binaries and other sensitive or confidential information.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22584.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Nov 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 22.6
EPSS0.22526