NetSight
IP …
low2.6Public exploit code

CVE-2003-0282

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two .

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.

Affected products

VendorProductAffected versions
Info-ZipUnzip
Version 5.50
ScoOpenlinux Server
Version 3.1.1
ScoOpenlinux Workstation
Version 3.1.1

References