Description
Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences.
References
- 14123 third-party-advisory
- 12419 vdb-entry
- 20050202 7a69Adv#19 - ZipGenius unpack path disclosure mailing-list
- 1013542 vdb-entry
- zipgenius-path-disclosure(19203) vdb-entry
- http://www.7a69ezine.org/node/view/195