Description
Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.
References
- ADV-2007-0235 vdb-entry
- 21458 third-party-advisory
- 32864 vdb-entry
- http://secunia.com/secunia_research/2006-72/advisory/
- 22104 vdb-entry
- pentazip-archive-directory-traversal(31581) vdb-entry