Описание
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Отчет
The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 4 | gcc | Will not fix | ||
| Red Hat Enterprise Linux 4 | gcc4 | Will not fix | ||
| Red Hat Enterprise Linux 5 | gcc44 | Not affected | ||
| Red Hat Enterprise Linux 6 | gcc | Not affected | ||
| Red Hat Enterprise Linux 5 | gcc | Fixed | RHSA-2011:0025 | 13.01.2011 |
Показывать по
Дополнительная информация
Статус:
2.6 Low
CVSS2
Связанные уязвимости
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Absolute path traversal vulnerability in the extract_jar function in j ...
2.6 Low
CVSS2