PT-2018-9622 · Apache+3 · Plexis Archiver+3

Danny Grander · Published 2018-06-12 · Updated 2023-08-02 · CVE-2018-1002200

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: plexus-archiver versions prior to 3.6.0

Description: The issue allows attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This is also known as 'Zip-Slip'.

Recommendations: For versions prior to 3.6.0, update to version 3.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to archive extraction functionality until a patch is available. Avoid using the affected archive extraction feature in plexus-archiver until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CESA-2018_1836

CVE-2018-1002200

DSA-4227-1

GHSA-HCXQ-X77Q-3469

MGASA-2019-0005

RHSA-2018:1836

RHSA-2018:1837

RHSA-2018_1836

SNYK-JAVA-ORGCODEHAUSPLEXUS-31680

USN-4832-1

Affected Products

Centos

Red Hat

Ubuntu

Plexis Archiver

References · 25

• 🔥 https://github.com/snyk/zip-slip-vulnerability · Exploit
• 🔥 https://github.com/codehaus-plexus/plexus-archiver/pull/87 · Exploit
• 🔥 https://snyk.io/research/zip-slip-vulnerability · Exploit
• 🔥 https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31680 · Exploit
• https://github.com/codehaus-plexus/plexus-archiver/commit/f8f4233508193b70df33759ae9dc6154d69c2ea8 · Patch
• https://linux.oracle.com/errata/ELSA-2018-1836.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0005 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1002200 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-1002200 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hcxq-x77q-3469 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1002200 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1002200 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4832-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4832-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1837 · Vendor Advisory