medium5.0
CVE-2012-5171
Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file.
Impact
Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Be-Graph | Bezip | through 3.04 Versions 3.00, 3.02, 3.03 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN18223913/995378/index.html
- http://jvn.jp/en/jp/JVN18223913/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000101
- http://www.be-graph.com/bgi/product/bezip/secure1.html#en
- http://www.securityfocus.com/bid/56488
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79916
- http://jvn.jp/en/jp/JVN18223913/995378/index.html
- http://jvn.jp/en/jp/JVN18223913/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000101
- http://www.be-graph.com/bgi/product/bezip/secure1.html#en
- http://www.securityfocus.com/bid/56488
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79916