Vulnerability in Evan Wagner Dzip
CVE-2005-1874
Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. (dot dot) in a .dz archive.
EPSS: 0.016 (73.9th percentile) — read the EPSS interpretation.
Affected products
- Evan_wagner Dzip — versions 2.1, 2.2, 2.3
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)