CVE

Id
77819  
CVE No.
CVE-2015-0556  
Status
Candidate  
Description
Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.  
Phase
Assigned (20150105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
713059 77819 CVE-2015-0556 MLIST:[oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
713060 77819 CVE-2015-0556 URL:http://www.openwall.com/lists/oss-security/2015/01/03/5  View
713061 77819 CVE-2015-0556 MLIST:[oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
713062 77819 CVE-2015-0556 URL:http://www.openwall.com/lists/oss-security/2015/01/05/9  View
713063 77819 CVE-2015-0556 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774434  View
713064 77819 CVE-2015-0556 DEBIAN:DSA-3213  View
713065 77819 CVE-2015-0556 URL:http://www.debian.org/security/2015/dsa-3213  View
713066 77819 CVE-2015-0556 FEDORA:FEDORA-2015-5603  View
713067 77819 CVE-2015-0556 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html  View
713068 77819 CVE-2015-0556 FEDORA:FEDORA-2015-5546  View
713069 77819 CVE-2015-0556 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html  View
713070 77819 CVE-2015-0556 FEDORA:FEDORA-2015-5524  View
713071 77819 CVE-2015-0556 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html  View
713072 77819 CVE-2015-0556 MANDRIVA:MDVSA-2015:201  View
713073 77819 CVE-2015-0556 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:201  View
713074 77819 CVE-2015-0556 BID:71860  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6163 JVNDB-2015-001483 Cisco IOS の Measurement などの実装におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS の Measurement、Aggregation、および Correlation Engine (MACE) の実装には、競合状態により、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。 CVE-2015-0608 77819 7.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001483.html  View