CVE

Id
4072  
CVE No.
CVE-2001-1268  
Status
Candidate  
Description
Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.  
Phase
Modified (20100521)  
Votes
ACCEPT(3) Cole, Cox, Green | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
CHANGE> [Cox changed vote from REVIEWING to ACCEPT] | Christey> MANDRAKE:MDKSA-2002:065 | Frech> XF:archive-extraction-directory-traversal(10224) | Christey> CONECTIVA:CLA-2002:538 | URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538 | HP:HPSBTL0209-068 | URL:http://online.securityfocus.com/advisories/4514 | REDHAT:RHSA-2002:096 | URL:http://www.redhat.com/support/errata/RHSA-2002-096.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18944 4072 CVE-2001-1268 BUGTRAQ:20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers  View
18945 4072 CVE-2001-1268 URL:http://online.securityfocus.com/archive/1/196445  View
18946 4072 CVE-2001-1268 CONFIRM:http://www.info-zip.org/pub/infozip/UnZip.html  View
18947 4072 CVE-2001-1268 SUNALERT:47800  View
18948 4072 CVE-2001-1268 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1  View
18949 4072 CVE-2001-1268 SUNALERT:1000928  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63787 JVNDB-2002-000114 Unzip ユーティリティのアーカイブ抽出処理における (.. dotdot) ディレクトリトラバーサルの脆弱性 ------------ CVE-2001-1268 4072 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000114.html  View