Описание
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
A path traversal flaw was found in file-roller. If a user were tricked into opening a specially crafted archive and clicking on a symbolic link, file deletion could occur.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | file-roller | Not affected | ||
| Red Hat Enterprise Linux 6 | file-roller | Not affected | ||
| Red Hat Enterprise Linux 7 | file-roller | Will not fix |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Связанные уязвимости
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
The _g_file_remove_directory function in file-utils.c in File Roller 3 ...
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
5.5 Medium
CVSS3
4.3 Medium
CVSS2