Fastjar Archive Extraction Directory Traversal Vulnerability
BID:15669
CVE-2006-3619 |Info
Fastjar Archive Extraction Directory Traversal Vulnerability
| Bugtraq ID: | 15669 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-3619 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 01 2005 12:00AM |
| Updated: | Mar 13 2008 08:01PM |
| Credit: | tv is credited with the discovery of this vulnerability. |
| Vulnerable: |
VMWare ESX Server 3.0.2 VMWare ESX Server 3.0.1 VMWare ESX Server 3.0 SGI ProPack 3.0 SP6 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Desktop 4.0 Redhat Desktop 3.0 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 GNU gcc 4.1.1 GNU gcc 4.0.1 GNU gcc 3.2.3 FastJar FastJar 0.93 Debian gcc 3.4 Avaya SES 3.1.1 Avaya SES 3.0 Avaya SES 2.0 Avaya Messaging Storage Server MSS 3.0 Avaya Message Networking Avaya Integrated Management Avaya EMMC 1.021 Avaya EMMC 1.017 Avaya CVLAN Avaya Communication Manager 2.0.1 Avaya Communication Manager 2.0 Avaya Communication Manager 4.0 Avaya Communication Manager 3.1 Avaya Communication Manager 3.0 Avaya CCS 3.0 Avaya CCS 2.0 Avaya Aura Application Enablement Services 4.0.1 Avaya Aura Application Enablement Services 3.1.3 Avaya Aura Application Enablement Services 3.0 Avaya AES 4.0 Avaya AES 3.1 |
| Not Vulnerable: | |
Discussion
Fastjar Archive Extraction Directory Traversal Vulnerability
Fastjar is prone to a directory-traversal vulnerability because the utility fails to properly sanitize user-supplied data.
An attacker can exploit this vulnerability to overwrite arbitrary files in the context of the user running the vulnerable application. Depending on the files overwritten, this could cause the system to crash or could facilitate unauthorized access; other attacks are also possible.
Fastjar is prone to a directory-traversal vulnerability because the utility fails to properly sanitize user-supplied data.
An attacker can exploit this vulnerability to overwrite arbitrary files in the context of the user running the vulnerable application. Depending on the files overwritten, this could cause the system to crash or could facilitate unauthorized access; other attacks are also possible.
Exploit / POC
Fastjar Archive Extraction Directory Traversal Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Fastjar Archive Extraction Directory Traversal Vulnerability
Solution:
Please see the referenced advisories for more information.
SGI ProPack 3.0 SP6
Solution:
Please see the referenced advisories for more information.
SGI ProPack 3.0 SP6
-
SGI Patch 10421
ftp://oss.sgi.com/projects/sgi_propack/download/
References
Fastjar Archive Extraction Directory Traversal Vulnerability
References:
References: