CVE-2010-0831

CVE-2010-0831: Directory traversal in FastJar 0.98 (extract_jar in jartool.c) allows creating/modifying arbitrary files via a .. in a non-initial path within a JAR. It is related to CVE-2005-1080 and notes an incomplete fix for CVE-2006-3619. The provided documents do not include concrete remedia...