Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-0831

Опубликовано: 18 июн. 2010
Источник: nvd
CVSS2: 5.8
EPSS Низкий

Описание

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*

EPSS

Процентиль: 71%
0.00689
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu
около 15 лет назад

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

redhat
около 15 лет назад

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

debian
около 15 лет назад

Directory traversal vulnerability in the extract_jar function in jarto ...

github
около 3 лет назад

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

oracle-oval
больше 14 лет назад

ELSA-2011-0025: gcc security and bug fix update (LOW)

EPSS

Процентиль: 71%
0.00689
Низкий

5.8 Medium

CVSS2

Дефекты

CWE-22