CVE

Id
77820  
CVE No.
CVE-2015-0557  
Status
Candidate  
Description
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.  
Phase
Assigned (20150105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
713075 77820 CVE-2015-0557 MLIST:[oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
713076 77820 CVE-2015-0557 URL:http://www.openwall.com/lists/oss-security/2015/01/03/5  View
713077 77820 CVE-2015-0557 MLIST:[oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
713078 77820 CVE-2015-0557 URL:http://www.openwall.com/lists/oss-security/2015/01/05/9  View
713079 77820 CVE-2015-0557 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435  View
713080 77820 CVE-2015-0557 DEBIAN:DSA-3213  View
713081 77820 CVE-2015-0557 URL:http://www.debian.org/security/2015/dsa-3213  View
713082 77820 CVE-2015-0557 FEDORA:FEDORA-2015-5603  View
713083 77820 CVE-2015-0557 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html  View
713084 77820 CVE-2015-0557 FEDORA:FEDORA-2015-5546  View
713085 77820 CVE-2015-0557 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html  View
713086 77820 CVE-2015-0557 FEDORA:FEDORA-2015-5524  View
713087 77820 CVE-2015-0557 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html  View
713088 77820 CVE-2015-0557 MANDRIVA:MDVSA-2015:201  View
713089 77820 CVE-2015-0557 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:201  View
713090 77820 CVE-2015-0557 BID:71895  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6205 JVNDB-2015-001525 Cisco IOS の Measurement などの実装の Common Classification Engine におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS の Measurement、Aggregation および Correlation Engine (MACE) の実装の Common Classification Engine (CCE) には、競合状態により、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。 CVE-2015-0609 77820 7.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001525.html  View