medium6.8
CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via ..
Impact
Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kde | Ark | through 2.17 |
| Kde | Kde Sc | through 4.7.4 Versions 4.7.0, 4.7.1, 4.7.2, 4.7.3 |
| Canonical | Ubuntu Linux | Versions 10.04, 10.10, 11.04, 11.10 |
| Opensuse | Opensuse | Version 11.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html
- http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2011/Oct/351
- http://www.ubuntu.com/usn/USN-1276-1
- https://bugzilla.novell.com/show_bug.cgi?id=708268
- https://bugzilla.redhat.com/show_bug.cgi?id=725764
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html
- http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2011/Oct/351
- http://www.ubuntu.com/usn/USN-1276-1
- https://bugzilla.novell.com/show_bug.cgi?id=708268
- https://bugzilla.redhat.com/show_bug.cgi?id=725764