2 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-7162
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on ...
Arbitrary File Write
file-roller is vulnerable to arbitrary file write. The vulnerability exists through a directory symlink pointing outside of the target directory...