CVE-2005-0161 - Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary fi

CVE-2005-0161

Summary

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html
http://secunia.com/advisories/14359
http://www.novell.com/linux/security/advisories/2005_16_sr.html
http://www.securityfocus.com/bid/12628

Vulnerable Configurations

cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*
cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 05-09-2008 - 20:45)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

refmap via4

bid	12628
fulldisc	20050222 unace-1.2b multiple buffer overflows and directory traversal bugs
secunia	14359
suse	SUSE-SR:2005:016

Last major update

05-09-2008 - 20:45

Published

22-02-2005 - 05:00

Last modified

05-09-2008 - 20:45