CVE-2003-0282
NoneCVSS
—
EPSS
22.0%
Published
Jun 16, 2003
CISA due date
—
The record
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | unzip | 0 | 5.50-3 |
| Debian:12 | unzip | 0 | 5.50-3 |
| Debian:13 | unzip | 0 | 5.50-3 |
| Debian:3.0 | unzip | 0 | 5.50-1woody2 |
Related vulnerabilities
- CVE-2014-9913 Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote… Also affects unzip
- CVE-2015-7696 Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based… Also affects unzip
- CVE-2014-9636 unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or… Also affects unzip