Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2322

Опубликовано: 18 июн. 2010
Источник: nvd
CVSS2: 2.6
EPSS Низкий

Описание

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00367
Низкий

2.6 Low

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu
около 15 лет назад

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

redhat
около 15 лет назад

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

debian
около 15 лет назад

Absolute path traversal vulnerability in the extract_jar function in j ...

suse-cvrf
почти 4 года назад

Security update for fastjar

suse-cvrf
почти 4 года назад

Security update for fastjar

EPSS

Процентиль: 58%
0.00367
Низкий

2.6 Low

CVSS2

Дефекты

CWE-22