Lucene search

K
nvd[email protected]NVD:CVE-2015-0556
HistoryApr 08, 2015 - 6:59 p.m.

CVE-2015-0556

2015-04-0818:59:03
CWE-59
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.9%

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

Affected configurations

NVD
Node
arj_softwarearj_archiverRange3.10.22
Node
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.9%