ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
BID:64753
Info
ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 64753 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0802 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2014 12:00AM |
| Updated: | Jan 10 2014 12:00AM |
| Credit: | Ryohei Koike of Sakura Information Systems |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
ZIP with Pass for Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
The following products are affected:
ZIP with Pass 4.5.7 and prior
ZIP with Pass Pro 6.3.8 and prior
ZIP with Pass for Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
The following products are affected:
ZIP with Pass 4.5.7 and prior
ZIP with Pass Pro 6.3.8 and prior
Exploit / POC
ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
ZIP With Pass For Android Arbitrary File Overwrite Vulnerability
References:
References: