CVE

Id
9455  
CVE No.
CVE-2004-1027  
Status
Candidate  
Description
Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.  
Phase
Assigned (20041112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63491 9455 CVE-2004-1027 FULLDISC:20041010 unarj dir-transversal bug (../../../..)  View
63492 9455 CVE-2004-1027 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.html  View
63493 9455 CVE-2004-1027 DEBIAN:DSA-628  View
63494 9455 CVE-2004-1027 URL:http://www.debian.org/security/2005/dsa-628  View
63495 9455 CVE-2004-1027 DEBIAN:DSA-652  View
63496 9455 CVE-2004-1027 URL:http://www.debian.org/security/2005/dsa-652  View
63497 9455 CVE-2004-1027 FEDORA:FLSA:2272  View
63498 9455 CVE-2004-1027 URL:http://lwn.net/Articles/121827/  View
63499 9455 CVE-2004-1027 GENTOO:GLSA-200411-29  View
63500 9455 CVE-2004-1027 URL:http://security.gentoo.org/glsa/glsa-200411-29.xml  View
63501 9455 CVE-2004-1027 REDHAT:RHSA-2005:007  View
63502 9455 CVE-2004-1027 URL:http://www.redhat.com/support/errata/RHSA-2005-007.html  View
63503 9455 CVE-2004-1027 XF:unarj-directory-traversal(17684)  View
63504 9455 CVE-2004-1027 URL:http://xforce.iss.net/xforce/xfdb/17684  View
63505 9455 CVE-2004-1027 BID:11436  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63223 JVNDB-2004-000565 IBM AIX の chcod コマンドにおける任意のコードを実行される脆弱性 IBM AIX に実装されている chcod コマンドには、PATH 環境変数の取り扱いに不備が存在するため、任意のコードを実行される脆弱性が存在します。 CVE-2004-1028 9455 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000565.html  View