Vulnerability in Rarsoft Rar

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.

EPSS: 0.006 (44.2th percentile) — read the EPSS interpretation.

Affected products

Rarsoft Rar
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)