low2.1Public exploit code
CVE-2005-0161
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Winace UnAce 1.x - ACE Archive Directory Traversal2005-02-23 · remote · linux · Verified
Impact
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Merge | Unace | Version 1.2b |
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html
- http://secunia.com/advisories/14359
- http://www.novell.com/linux/security/advisories/2005_16_sr.html
- http://www.securityfocus.com/bid/12628
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html
- http://secunia.com/advisories/14359
- http://www.novell.com/linux/security/advisories/2005_16_sr.html
- http://www.securityfocus.com/bid/12628