837 matches found
jar: directory traversal vulnerability
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
jar: directory traversal vulnerability
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
OpenJDK: jar directory traversal issues (Tools, 8064601)
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
OpenJDK: jar directory traversal issues (Tools, 8064601)
A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause jar to overwrite arbitrary files writable by the user running jar when the archive was extracted...
USN-2482-1 elfutils vulnerability
Alexander Cherepanov discovered that libelf1 incorrectly handled certain filesystem paths while extracting ar archives. An attacker could use this flaw to perform a directory traversal attack on the root directory if the process extracting the ar archive has write access to the root directory...
p7zip symbolic link directory traversal vulnerability
7-Zip is a free compression software with high compression ratio. A directory traversal vulnerability exists in p7zip symbolic links, due to the fact that 7-Zip extracts symbolic links when extracting archive files. Allowing an attacker to exploit this vulnerability could construct a malicious...
docker: multiple issues
CVE-2014-9356 path traversal Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both...
Amazon Linux AMI : docker (ALAS-2014-461)
Path traversal attacks are possible in the processing of absolute symlinks. In checking symlinks for traversals, only relative links were considered. This allowed path traversals to exist where they should have otherwise been prevented. This was exploitable via both archive extraction and through...
Docker 1.3.2 - Security Advisory [24 Nov 2014]
Today, we are releasing Docker 1.3.2 in order to address two critical security issues. This release also includes several bugfixes, including changes to the insecure-registry option. Below are CVE descriptions for the vulnerabilities addressed in this release. Docker 1.3.2 is available immediatel...
UBUNTU-CVE-2013-4420
Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...
[SECURITY] Fedora 16 Update: rpmdevtools-8.3-1.fc16
This package contains scripts and XEmacs support files to aid in development of RPM packages. rpmdev-setuptree Create RPM build tree within user's home directory rpmdev-diff Diff contents of two archives rpmdev-newspec Creates new .spec from template rpmdev-rmdevelrpms Find and optionally remove...
ark archiver directory traversal
Directory traversal during archive extraction...
Directory traversal and absolute path in multiple archivers
Directory traversal and absolute path allow to overwrite any file during archive extraction...
UnrealCommander file manager directory traversal
Directory traversal on archive extraction...
Moderate: Red Hat Security Advisory: tar security update
Updated tar package that fixes a path traversal flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...
tar security update
CentOS Errata and Security Advisory CESA-2006:0749 Updated tar packages that fix a path traversal flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can resto...
Unalz 0.x - Archive Filename Buffer Overflow
Unalz 0.x - Archive Filename Buffer Overflow source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit th...
Virtools Web Player game platform multiple vulnerabilities
Buffer overflows and directory traversal on archive extraction...
unzoo -- Directory Traversal Vulnerability
Secunia reports: Doubles has discovered a vulnerability in Unzoo, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an input validation error when unpacking archives. This can be exploited via a directory traversal attack to...
