CVE-2015-0557

Published: Apr 8, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

MDVSA-2015:201

vendor-advisory

x_refsource_MANDRIVA

FEDORA-2015-5546

vendor-advisory

x_refsource_FEDORA

[oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash

mailing-list

x_refsource_MLIST

GLSA-201612-15

vendor-advisory

x_refsource_GENTOO

[oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash

mailing-list

x_refsource_MLIST

FEDORA-2015-5524

vendor-advisory

x_refsource_FEDORA

DSA-3213

vendor-advisory

x_refsource_DEBIAN

FEDORA-2015-5603

vendor-advisory

x_refsource_FEDORA

71895

vdb-entry

x_refsource_BID

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-0557

Description

Affected Products

References