CVE-2011-2725
Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.
| Software | From | Fixed in |
|---|---|---|
| kde / kde_sc | - | 4.7.4.x |
| kde / kde_sc | 4.7.0 | 4.7.0.x |
| kde / kde_sc | 4.7.3 | 4.7.3.x |
| kde / kde_sc | 4.7.1 | 4.7.1.x |
| kde / kde_sc | 4.7.2 | 4.7.2.x |
| kde / ark | - | 2.17.x |
| canonical / ubuntu_linux | 10.10 | 10.10.x |
| canonical / ubuntu_linux | 11.04 | 11.04.x |
| canonical / ubuntu_linux | 11.10 | 11.10.x |
| opensuse / opensuse | 11.4 | 11.4.x |
| canonical / ubuntu_linux | 10.04 | 10.04.x |
- http://lists.opensuse.org/opensuse-updates/2012-03/msg00002.html
- http://packetstormsecurity.com/files/105610/Ark-2.16-Directory-Traversal.html
- http://seclists.org/fulldisclosure/2011/Oct/351
- http://www.ubuntu.com/usn/USN-1276-1
- https://bugzilla.novell.com/show_bug.cgi?id=708268
- https://bugzilla.redhat.com/show_bug.cgi?id=725764
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime