Security Advisory

CVE-2015-0557

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-04-08 18:00:00

Last updated 2024-08-06 04:10:11

Assigner debian

CVSS score not scored

State PUBLISHED

Description

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.

← Browse all CVEs View on cve.org ↗