PKZip Tar Hostile Destination Path Vulnerability
BID:6419
Info
PKZip Tar Hostile Destination Path Vulnerability
| Bugtraq ID: | 6419 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2002 12:00AM |
| Updated: | Dec 17 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Florian Schafferhans <[email protected]>. |
| Vulnerable: |
PKWare PKZip 5.0 0.01 PKWare PKZip 5.0 |
| Not Vulnerable: | |
Discussion
PKZip Tar Hostile Destination Path Vulnerability
PKZip is prone to a security vulnerability when unpacking .tar archives. The problem is in the handling of pathnames.
By specifying a path for an archived item which points outside the expected directory scope, the creator of the archive can cause the file to be extracted to arbitrary locations on the filesystem. An attacker may take advantage of this vulnerability to cause malicious files to be placed anywhere on a target filesystem.
This issue was reported in PKZip for Microsoft Windows platforms. It is not known if other platforms are also affected.
PKZip is prone to a security vulnerability when unpacking .tar archives. The problem is in the handling of pathnames.
By specifying a path for an archived item which points outside the expected directory scope, the creator of the archive can cause the file to be extracted to arbitrary locations on the filesystem. An attacker may take advantage of this vulnerability to cause malicious files to be placed anywhere on a target filesystem.
This issue was reported in PKZip for Microsoft Windows platforms. It is not known if other platforms are also affected.
Exploit / POC
PKZip Tar Hostile Destination Path Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
PKZip Tar Hostile Destination Path Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PKZip Tar Hostile Destination Path Vulnerability
References:
References:
- Directory traversal vulnerabilities in several archivers processing .tar (Florian Schafferhans