Description
Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive.
References
- 20060225 Archive_Zip (Zip file management class) Directory traversal mailing-list
- 20060224 Archive_Tar v 1.2(Tested) (Tar file management class) Directory traversal mailing-list
- http://www.hamid.ir/security/phpzip.txt
- ziplib-directory-traversal(24972) vdb-entry
- 486 third-party-advisory