PT-2018-5238 · Poco+1 · Poco C++ Libraries+1

Stephan Zeisberg · Published 2018-01-03 · Updated 2024-04-05 · CVE-2017-1000472

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions POCO C++ Libraries versions prior to 1.8

Description The issue concerns a "file path injection vulnerability" in the ZipCommon::isValidPath() function, which does not properly restrict the filename value in the ZIP header. This allows attackers to conduct absolute path traversal attacks during ZIP decompression, potentially creating or overwriting arbitrary files via a crafted ZIP file.

Recommendations For versions prior to 1.8, update to version 1.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of ZIP files from untrusted sources to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2017-3590

ALT-PU-2019-2751

CVE-2017-1000472

DLA-1239-1

DSA-4083-1

Affected Products

Alt Linux

Poco C++ Libraries

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chrome_jscreate_sideeffect.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/pocoproject/poco/issues/1968 · Exploit
• 🔥 https://github.com/pocoproject/poco/commit/62f875dfe1298041289f926a6a1a39cb765b13ee · Exploit
• 🔥 https://github.com/pocoproject/poco/compare/poco-1.12.5p2-release...poco-1.13.0-release · Exploit
• 🔥 https://github.com/pocoproject/poco/issues/4320 · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2016-5172.md · Exploit
• 🔥 https://github.com/mpgn/BEAST-PoC · Exploit
• 🔥 https://github.com/maxpl0it/CVE-2019-17026-Exploit · Exploit
• 🔥 https://github.com/ChoKyuWon/CVE-2020-6418 · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/Goyotan/CVE-2020-6468-PoC · Exploit
• 🔥 https://github.com/ChoKyuWon/CVE-2019-13720 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥 https://github.com/HaboobLab/CVE-2019-13764 · Exploit