CVE-2013-4668

2013-07-18 18:51:40 2013-08-22 08:54:30

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

ISC BIND 8.2.7 ISC BIND 8.3.5 ISC BIND 8.2.5 ISC BIND 8.3.0 ISC BIND 8.3.2 ISC BIND 8.2.6 ISC BIND 8.3.3

Paolo bacchilega - File roller

Advisory	Patch	Confirmed	Link
			http://www.ocert.org/advisories/ocert-2013-001.html
			54351
			61008
			USN-1906-1
			https://git.gnome.org/browse/file-roller/commit/?id=b147...
			openSUSE-SU-2013:1281
			20130708 [oCERT-2013-001] File Roller path sanitization ...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)