Arbitrary File Overwrite

2020-04-1000:59:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

JSON

gcc is vulnerable to arbitrary file overwrite. The vulnerability exists through two directory traversal flaws were found in the way fastjar extracted JAR archive files. If a local, unsuspecting user extracted a specially-crafted JAR file, it could cause fastjar to overwrite arbitrary files writable by the user running fastjar.

CPENameOperatorVersion
gcceq4.1.2__46.el5_4.2
gcceq4.1.2__48.el5
gcceq4.1.2__14.el5
gcceq4.1.2__46.el5
gcceq4.1.2__44.el5
gcceq4.1.2__42.el5
gcceq4.1.1__52.el5
gcceq4.1.2__46.el5_4.1
gcceq4.1.1__52.el5.2
gcceq4.1.2__46.el5_4.2

Name	Operator	Version
gcc	eq	4.1.2__46.el5_4.2
gcc	eq	4.1.2__48.el5
gcc	eq	4.1.2__14.el5
gcc	eq	4.1.2__46.el5
gcc	eq	4.1.2__44.el5
gcc	eq	4.1.2__42.el5
gcc	eq	4.1.1__52.el5
gcc	eq	4.1.2__46.el5_4.1
gcc	eq	4.1.1__52.el5.2
gcc	eq	4.1.2__46.el5_4.2