CVE-2013-4668

2013-07-1816:51:40

CWE-22

[email protected]

web.nvd.nist.gov

cve

2013

4668

directory traversal

file roller

vulnerability

libarchive

remote attack

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.7%

JSON

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a “Keep directory structure” action, related to fr-archive-libarchive.c and fr-window.c.

Affected configurations

NVD

Node

file_roller_projectfile_rollerRange3.6.0–3.6.4gnome

file_roller_projectfile_rollerRange3.8.0–3.8.3gnome

file_roller_projectfile_rollerRange3.9.1–3.9.3gnome

Node

canonicalubuntu_linuxMatch12.10

canonicalubuntu_linuxMatch13.04

CPENameOperatorVersion
file_roller_project:file_rollerfile roller project file rollerlt3.6.4
file_roller_project:file_rollerfile roller project file rollerlt3.8.3
file_roller_project:file_rollerfile roller project file rollerlt3.9.3

CPE	Name	Operator	Version
file_roller_project:file_roller	file roller project file roller	lt	3.6.4
file_roller_project:file_roller	file roller project file roller	lt	3.8.3
file_roller_project:file_roller	file roller project file roller	lt	3.9.3