Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
BID:19070
Info
Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
| Bugtraq ID: | 19070 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-3619 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2006 12:00AM |
| Updated: | Jul 20 2006 05:22PM |
| Credit: | The vendor disclosed this vulnerability. |
| Vulnerable: |
GNU gcc 4.1 GNU gcc 4.0.3 GNU gcc 4.0 GNU gcc 3.3.3 GNU gcc 3.2.3 -4 GNU gcc 3.2.3 -3 GNU gcc 3.2.3 GNU gcc 3.2.2 -5 GNU gcc 3.2.2 GNU gcc 3.2.1 GNU gcc 3.2 -7 GNU gcc 3.2 GNU gcc 3.1.1 GNU gcc 3.0 |
| Not Vulnerable: | |
Discussion
Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
The GNU gcc implementation of the 'fastjar' utility is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data.
An attacker can exploit this vulnerability to overwrite arbitrary files in the context of the user running the vulnerable application. Depending on the files overwritten, this could crash the system or facilitate unauthorized access; other attacks are also possible.
The GNU gcc implementation of the 'fastjar' utility is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data.
An attacker can exploit this vulnerability to overwrite arbitrary files in the context of the user running the vulnerable application. Depending on the files overwritten, this could crash the system or facilitate unauthorized access; other attacks are also possible.
Exploit / POC
Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
Attackers can exploit this issue via a web client.
Attackers can exploit this issue via a web client.
Solution / Fix
Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
Solution:
The vendor has released a patch to address this issue. Please see the reference section for details.
GNU gcc 3.0
GNU gcc 3.1.1
GNU gcc 3.2 -7
GNU gcc 3.2
GNU gcc 3.2.1
GNU gcc 3.2.2
GNU gcc 3.2.2 -5
GNU gcc 3.2.3
GNU gcc 3.2.3 -4
GNU gcc 3.2.3 -3
GNU gcc 3.3.3
GNU gcc 4.0
GNU gcc 4.0.3
GNU gcc 4.1
Solution:
The vendor has released a patch to address this issue. Please see the reference section for details.
GNU gcc 3.0
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.1.1
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2 -7
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.1
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.2
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.2 -5
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.3
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.3 -4
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.2.3 -3
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 3.3.3
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 4.0
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 4.0.3
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
GNU gcc 4.1
-
GNU jartool.c
fixes GNU GCC fastjar 3.x and 4.x
http://gcc.gnu.org/bugzilla/attachment.cgi?id=11904&action=view
References
Gnu GCC FastJar Archive Extraction Directory Traversal Vulnerability
References:
References:
- FastJar Homepage (FastJar)
- GCC Bugzilla Bug 28359 ([email protected])
- jartool.c (extract_jar): Do not allow directory traversal (Richard Guenther)