Description
Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
References
- 16800 vdb-entry
- 23464 vdb-entry
- http://www.hamid.ir/security/winace.txt
- 19013 third-party-advisory
- ADV-2006-0730 vdb-entry
- winace-rar-tar-directory-traversal(24902) vdb-entry
- 20060224 WinAce Archiver v2.6 Directory traversal mailing-list