WinACE RAR and TAR Directory Traversal (CVE-2006-0981)

WinACE Archiver is an application that can compress to and decompress from various archive formats. The compression mainly supports ACE, LZA, MS-CAB, ZIP archive formats, however the decompression support includes a wider range of compression formats including TAR, RAR, and others. There exists a...

CVE-2006-0981

CVE-2006-0981 describes a directory traversal in e-merge WinAce 2.6 and earlier, where improper handling of archived file paths in TAR (and ZIP) archives allows remote attackers to create or overwrite arbitrary files. CPAI advisory adds that exploitation may lead to code execution depending on lo...

CVE-2006-0981

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...