Lucene search
+L

146 matches found

OSV
OSV
added 2003/06/16 4:00 a.m.11 views

CVE-2003-0282

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . dot characters, which are filtered and result in a ".." sequence...

6.4AI score
SaveExploits0References18
Cvelist
Cvelist
added 2003/05/14 4:00 a.m.38 views

CVE-2003-0282

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . dot characters, which are filtered and result in a ".." sequence...

6.3AI score0.22526EPSS
SaveExploits2References15
securityvulns
securityvulns
added 2003/05/11 12:00 a.m.38 views

unzip directory traversal revisited

unzip directory traversal revisited problem: well I kinda stumbled over this when i was looking for something else A while back some fuss was made over the use of .. sequences in archives because it allows you to craft an archive which will trojan your system on extraction the creators of unzip...

1.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2002/10/02 6:44 p.m.12 views

Low: Red Hat Security Advisory: unzip security update

The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction. updated Jan 22 2003 Added description of CAN-2002-1216 which was also fixed by these erratum packages. The unzip and tar utilities are used for dealing with archives,...

5CVSS7AI score0.03589EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
added 2002/09/29 8:40 a.m.14 views

Low: Red Hat Security Advisory: : : : Updated unzip and tar packages fix vulnerabilities

The unzip and tar utilities contain vulnerabilities which can allow arbitrary files to be overwritten during archive extraction. updated Jan 22 2003 Added description of CAN-2002-1216 which was also fixed by these erratum packages The unzip and tar utilities are used for manipulating archives,...

5CVSS6.9AI score0.03589EPSS
SaveExploits3References1
NVD
NVD
added 2001/07/12 4:00 a.m.29 views

CVE-2001-1269

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' slash character...

2.1CVSS6.7AI score0.00503EPSS
SaveExploits1References4
Rows per page
Query Builder