Description
Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.
References
- http://bugs.typo3.org/view.php?id=16362
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
- 70119 vdb-entry
- 45470 vdb-entry
- typo3-unspecified-file-include(64180) vdb-entry
- 35770 third-party-advisory
- [oss-security] 20120512 Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE mailing-list
- [oss-security] 20110113 CVE requests: ftpls, xdigger, lbreakout2, calibre, typo3 mailing-list
- [oss-security] 20120510 Re: CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE mailing-list
- http://securesystems.ca/advisory.php?id=2010-001
- [oss-security] 20120511 CVE-request: TYPO3 TYPO3-SA-2010-022 still without CVE mailing-list