380 matches found
CVE-2023-49102
NZBGet 21.1 is affected by an authenticated remote code execution vulnerability. The root cause is that the unarchive helpers 7za and unrar preserve executable permissions, allowing an attacker with Control privileges to execute a file by setting SevenZipCommand or UnrarCmd. This issue impacts pr...
The vulnerability of the UnRAR decompression tool lies in the improper handling of symbolic links before accessing the file, allowing attackers to gain access to confidential data.
The vulnerability of the UnRAR decompression tool is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data...
GLSA-202309-04 : RAR, UnRAR: Arbitrary File Overwrite
The remote host is affected by the vulnerability described in GLSA-202309-04 RAR, UnRAR: Arbitrary File Overwrite - RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract aka unpack operation, as demonstrated by creating a /.ssh/authorizedkeys...
RAR, UnRAR: Arbitrary File Overwrite
Background RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files. Description Due to an error in the validation of symbolic links within archives, RAR and UnRAR can potentially write files to a directory which is outside of the intended unpack directory. Impact...
ROS-20230911-08
Vulnerability of UnRAR file unzipping tool is related to incorrect link resolution before accessing a file "Jump to link". before accessing the file "Follow link". Exploitation of the vulnerability could allow an attacker acting remotely to extract files outside the destination folder using file...
MGASA-2023-0258 Updated unrar packages fix security vulnerability
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. CVE-2023-40477...
Updated unrar packages fix security vulnerability
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. CVE-2023-40477...
Mageia: Security Advisory (MGASA-2023-0258)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3542-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3542 : libunrar-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3542 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3542-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3542-1] unrar-nonfree security update
Debian LTS Advisory DLA-3542-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 26, 2023 https://wiki.debian.org/LTS Package : unrar-nonfree Version : 1:5.6.6-1+deb10u4 CVE ID : CVE-2023-40477 A specific flaw within the processing of recovery volumes exists ...
DLA-3542-1 unrar-nonfree - security update
Bulletin has no description...
Debian dla-3534 : rar - security update
The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3534 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3534-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-3535 : libunrar-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3535 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3535-1 [email protected] https://www.debian.org/lts/security/...
Debian: Security Advisory (DLA-3535-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3535-1] unrar-nonfree security update
Debian LTS Advisory DLA-3535-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 17, 2023 https://wiki.debian.org/LTS Package : unrar-nonfree Version : 1:5.6.6-1+deb10u3 CVE ID : CVE-2022-48579 It was discovered that UnRAR, an unarchiver for rar files, allows...
DLA-3535-1 unrar-nonfree - security update
Bulletin has no description...
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.
...
