Unscored CVE-2001-1268 EUVD-2001-1249GHSA-wvrp-7r8w-696r

Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extractio…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

References

47800 vendor-advisory
20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers mailing-list
1000928 vendor-advisory
http://www.info-zip.org/pub/infozip/UnZip.html