CVE-2013-4668

Опубликовано: 18 июл. 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2013-07/0039.html
Broken Link
http://lists.opensuse.org/opensuse-updates/2013-07/msg00095.html
Broken Link
http://secunia.com/advisories/54351
Not Applicable
Third Party Advisory
http://www.ocert.org/advisories/ocert-2013-001.html
Third Party Advisory
http://www.securityfocus.com/bid/61008
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1906-1
Third Party Advisory
https://git.gnome.org/browse/file-roller/commit/?id=b147281293a8307808475e102a14857055f81631
Patch
Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2013-07/0039.html
Broken Link
http://lists.opensuse.org/opensuse-updates/2013-07/msg00095.html
Broken Link
http://secunia.com/advisories/54351
Not Applicable
Third Party Advisory
http://www.ocert.org/advisories/ocert-2013-001.html
Third Party Advisory
http://www.securityfocus.com/bid/61008
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-1906-1
Third Party Advisory
https://git.gnome.org/browse/file-roller/commit/?id=b147281293a8307808475e102a14857055f81631
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:file_roller_project:file_roller:*:*:*:*:*:gnome:*:*

Версия от 3.6.0 (включая) до 3.6.4 (исключая)

cpe:2.3:a:file_roller_project:file_roller:*:*:*:*:*:gnome:*:*

Версия от 3.8.0 (включая) до 3.8.3 (исключая)

cpe:2.3:a:file_roller_project:file_roller:*:*:*:*:*:gnome:*:*

Версия от 3.9.1 (включая) до 3.9.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01331

Низкий

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2013-4668

ubuntu

больше 12 лет назад

CVE-2013-4668

redhat

больше 12 лет назад

CVE-2013-4668

debian

больше 12 лет назад

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3 ...

GHSA-g2xw-w8v5-q99p

github

больше 3 лет назад

EPSS

Процентиль: 80%

0.01331

Низкий

5 Medium

CVSS2

Дефекты

CWE-22