Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 22/02/2005 Updated: 05/09/2008

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Multiple directory traversal vulnerabilities in unace 1.2b allow malicious users to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.

Vulnerable Product	Search on Vulmon	Subscribe to Product
e-merge unace 1.2b

source: wwwsecurityfocuscom/bid/12628/info A remotely exploitable client-side directory-traversal vulnerability affects Winace unace The application fails to properly sanitize file and directory names contained within malicious ACE format archives An attacker may leverage this issue by distributing malicious ACE archives to unsuspectin ...

NVD-CWE-Other http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html http://secunia.com/advisories/14359 http://www.novell.com/linux/security/advisories/2005_16_sr.html http://www.securityfocus.com/bid/12628 https://nvd.nist.gov https://www.exploit-db.com/exploits/25150/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0161

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect