Directory Traversal Vulnerabilities in Pax Archives Software
CVE-2015-1193

Currently unrated

Key Information:

Status
Vendor
CVE Published:
21 January 2015

What is CVE-2015-1193?

Multiple directory traversal vulnerabilities exist in Pax, which allow remote attackers to manipulate file paths in a way that enables them to write to arbitrary files on the affected system. Specifically, attackers can exploit this flaw by providing a full pathname or utilizing the '..' (dot dot) sequence within an archive, effectively gaining unauthorized access to sensitive files or overwriting existing files. It is crucial for users of Pax to apply available patches and take preventive measures to safeguard their systems against these potential attacks.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-1193 : Directory Traversal Vulnerabilities in Pax Archives Software