CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2005-02-22

Last modified

2024-08-07

Affected products

• Unace (E-merge)

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html
• http://secunia.com/advisories/14359
• http://www.novell.com/linux/security/advisories/2005_16_sr.html
• http://www.securityfocus.com/bid/12628