CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2001-07-12

Last modified

2024-08-08

Affected products

• Rar (Rarsoft)

References

• http://online.securityfocus.com/archive/1/196445
• http://www.security.nnov.ru/advisories/archdt.asp