Unscored CVE-2005-1874 EUVD-2005-1876GHSA-cj9w-4xvw-x6fp

Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot …

Published Jun 7, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot dot) in a .dz archive.

References

GLSA-200506-03 vendor-advisory
15599 third-party-advisory
http://bugs.gentoo.org/show_bug.cgi?id=93079
ADV-2005-0692 vdb-entry
15614 third-party-advisory