CVE-2004-0916

Опубликовано: 27 янв. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.

Ссылки

http://secunia.com/advisories/12882/
Patch
Vendor Advisory
http://www.debian.org/security/2004/dsa-574
Patch
Vendor Advisory
http://www.kyz.uklinux.net/cabextract.php#changes
http://www.securityfocus.com/bid/11460
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17766
http://secunia.com/advisories/12882/
Patch
Vendor Advisory
http://www.debian.org/security/2004/dsa-574
Patch
Vendor Advisory
http://www.kyz.uklinux.net/cabextract.php#changes
http://www.securityfocus.com/bid/11460
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17766

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cabextract_project:cabextract:0.2:*:*:*:*:*:*:*

cpe:2.3:a:cabextract_project:cabextract:0.6:*:*:*:*:*:*:*

cpe:2.3:a:cabextract_project:cabextract:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01938

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0916

debian

больше 20 лет назад

Directory traversal vulnerability in cabextract before 1.1 allows remo ...

GHSA-3c6r-mr2w-qgv5

github

больше 3 лет назад