CVE-2003-0282
NoneCVSS
—
EPSS
22.0%
Published
Jun 16, 2003
CISA due date
—
The record
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | unzip | 0 | 5.50-3 |
| Debian:12 | unzip | 0 | 5.50-3 |
| Debian:13 | unzip | 0 | 5.50-3 |
| Debian:3.0 | unzip | 0 | 5.50-1woody2 |