Directory traversal

2007-04-1803:19:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.4%

JSON

Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a … (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive.

CPENameOperatorVersion
picozipeq4.02

CPE	Name	Operator	Version
	picozip	eq	4.02

References

secunia.com/advisories/24868

www.bugtraq.ir/articles/advisory/picozip_directory_traversal/9

www.securityfocus.com/bid/23471

www.vupen.com/english/advisories/2007/1377

exchange.xforce.ibmcloud.com/vulnerabilities/33639