NVD

Id
23030  
Name
CVE-2015-0557  
Description
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-04-08  
Modified Date
2016-12-07  
Seq
2015-0557  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
122624 23030 CVE-2015-0557 FEDORA-2015-5603  View
122625 23030 CVE-2015-0557 FEDORA-2015-5546  View
122626 23030 CVE-2015-0557 FEDORA-2015-5524  View
122627 23030 CVE-2015-0557 DSA-3213  View
122628 23030 CVE-2015-0557 MDVSA-2015:201  View
122629 23030 CVE-2015-0557 [oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
122630 23030 CVE-2015-0557 [oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash  View
122631 23030 CVE-2015-0557 71895  View
122632 23030 CVE-2015-0557 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6803 JVNDB-2015-002123 Open-source ARJ アーカイバにおける絶対パストラバーサル攻撃を実行される脆弱性 Open-source ARJ アーカイバは、パスから先頭のスラッシュを適切に削除しないため、絶対パストラバーサル攻撃を実行され、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2015-0557 77768 CVE-2015-0557 23030 5.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002123.html 2015-04-06 2015-04-10 View