CVE

Id
4073  
CVE No.
CVE-2001-1269  
Status
Candidate  
Description
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the "/" (slash) character.  
Phase
Modified (20100521)  
Votes
ACCEPT(3) Cole, Cox, Green | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall  
Comments
CHANGE> [Cox changed vote from REVIEWING to ACCEPT] | Christey> MANDRAKE:MDKSA-2002:065 | Frech> XF:archive-extraction-directory-traversal(10224) | Christey> CONECTIVA:CLA-2002:538 | URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538 | REDHAT:RHSA-2002:096 | URL:http://www.redhat.com/support/errata/RHSA-2002-096.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18950 4073 CVE-2001-1269 BUGTRAQ:20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers  View
18951 4073 CVE-2001-1269 URL:http://online.securityfocus.com/archive/1/196445  View
18952 4073 CVE-2001-1269 CONFIRM:http://www.info-zip.org/pub/infozip/UnZip.html  View
18953 4073 CVE-2001-1269 SUNALERT:47800  View
18954 4073 CVE-2001-1269 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1  View
18955 4073 CVE-2001-1269 SUNALERT:1000928  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63788 JVNDB-2002-000115 Unzip ユーティリティのアーカイブ抽出処理における (/ slash) ディレクトリトラバーサルの脆弱性 ------------ CVE-2001-1269 4073 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000115.html  View