Lucene search
Veracode Vulnerability DatabaseVERACODE:38069HistoryNov 17, 2022 - 4:52 a.m.
Directory Traversal
2022-11-1704:52:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
rarlab
unrar
directory traversal
0.944 High
EPSS
Percentile
99.2%
rar is vulnerable to directory traversal. The vulnerability exists in RARLAB UnRAR which allows an attacker to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rar:sid | eq | 2:5.5.0-1 | |
| rar:buster | eq | 2:5.5.0-1 | |
| rar:sid | eq | 2:5.5.0-1 | |
| rar:buster | eq | 2:5.5.0-1 | |
| rar:bullseye | eq | 2:5.5.0-1 |
References
packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
lists.debian.org/debian-lts-announce/2023/08/msg00022.html
security-tracker.debian.org/tracker/CVE-2022-30333
security.gentoo.org/glsa/202309-04
www.rarlab.com/rar/rarlinux-x32-612.tar.gz
www.rarlab.com/rar_add.htm
Related
debiancve
debiancve
CVE-2022-30333
2022-05-09 08:15:06
metasploit
metasploit
UnRAR Path Traversal in Zimbra (CVE-2022-30333)
2022-07-27 19:45:47
UnRAR Path Traversal (CVE-2022-30333)
2022-07-19 21:05:15
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0206)
2022-05-26 00:00:00
Debian: Security Advisory (DLA-3534-1)
2023-08-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:1760-1)
2022-05-20 00:00:00
thn
thn
New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers
2022-06-29 09:29:00
Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite
2022-10-08 07:50:00
githubexploit
githubexploit
Exploit for Path Traversal in Rarlab Unrar
2022-07-22 01:14:29
Exploit for Path Traversal in Rarlab Unrar
2022-07-05 02:35:12
Exploit for Path Traversal in Rarlab Unrar
2022-07-26 13:28:12
prion
prion
Directory traversal
2022-05-09 08:15:00
osv
osv
rar - security update
2023-08-17 00:00:00
libclamunrar vulnerabilities
2024-01-08 18:05:14
cvelist
cvelist
CVE-2022-30333
2022-05-09 00:00:00
nvd
nvd
CVE-2022-30333
2022-05-09 08:15:06
mageia
mageia
Updated unrar packages fix security vulnerability
2022-05-25 21:46:18
packetstorm
packetstorm
Zimbra UnRAR Path Traversal
2022-08-05 00:00:00
nessus
nessus
Debian DLA-3534-1 : rar - LTS security update
2023-08-18 00:00:00
SUSE SLES12 Security Update : unrar (SUSE-SU-2022:1760-1)
2022-05-20 00:00:00
GLSA-202309-04 : RAR, UnRAR: Arbitrary File Overwrite
2023-09-17 00:00:00
debian
debian
[SECURITY] [DLA 3534-1] rar security update
2023-08-17 15:27:55
attackerkb
attackerkb
cve
cve
CVE-2022-30333
2022-05-09 08:15:06
ubuntucve
ubuntucve
CVE-2022-30333
2022-05-09 00:00:00
zdt
zdt
Zimbra UnRAR Path Traversal Exploit
2022-08-07 00:00:00
cisa_kev
cisa_kev
RARLAB UnRAR Directory Traversal Vulnerability
2022-08-09 00:00:00
redos
redos
ROS-20240614-01
2024-06-14 00:00:00
gentoo
gentoo
RAR, UnRAR: Arbitrary File Overwrite
2023-09-17 00:00:00
ubuntu
ubuntu
libclamunrar vulnerabilities
2024-01-08 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-08-12 18:52:27
Metasploit Wrap-Up
2022-08-26 21:47:13
ics
ics
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
2023-01-27 12:00:00
avleonov
avleonov