NVD

Id
12367  
Name
CVE-2010-0831  
Description
Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-18  
Modified Date
2013-04-18  
Seq
2010-0831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
68067 12367 CVE-2010-0831 [oss-security] 20100608 jar, fastjar directory traversal vulnerabilities  View
68068 12367 CVE-2010-0831 [oss-security] 20100608 Re: jar, fastjar directory traversal vulnerabilities  View
68069 12367 CVE-2010-0831 [oss-security] 20100608 Re: jar, fastjar directory traversal vulnerabilities  View
68070 12367 CVE-2010-0831 http://packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelog  View
68071 12367 CVE-2010-0831 GLSA-201209-21  View
68072 12367 CVE-2010-0831 MDVSA-2010:122  View
68073 12367 CVE-2010-0831 RHSA-2011:0025  View
68074 12367 CVE-2010-0831 41006  View
68075 12367 CVE-2010-0831 ADV-2010-1553  View
68076 12367 CVE-2010-0831 ADV-2011-0121  View
68077 12367 CVE-2010-0831 https://bugzilla.redhat.com/show_bug.cgi?id=594497  View
68078 12367 CVE-2010-0831 https://bugzilla.redhat.com/show_bug.cgi?id=601823  View
68079 12367 CVE-2010-0831 https://launchpad.net/bugs/540575  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36942 JVNDB-2010-002722 FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性 FastJar の jartool.c 内にある extract_jar 関数には、.jar アーカイブ内において、ファイルパスの先頭以外の箇所に .. (dot dot) を含むファイル名の処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-0831 43411 CVE-2010-0831 12367 5.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002722.html 2010-06-18 2011-02-03 View