Unscored CVE-2001-1271 EUVD-2001-1252GHSA-3grm-5x3c-hp2m

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. …

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.

References

20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers mailing-list
http://www.security.nnov.ru/advisories/archdt.asp