PT-2014-2128 · Kde+1 · Ark+1
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Ark versions 4.7.x and earlier
Description
A directory traversal issue allows remote attackers to delete and force the display of arbitrary files by using .. (dot dot) sequences in a zip file.
Recommendations
For Ark versions 4.7.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ark
Suse