PT-2019-12020 · Archive · Archiver
Published
2019-10-28
·
Updated
2024-02-02
·
CVE-2019-10743
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
archiver versions all
Description
The issue allows an attacker to perform a Zip Slip attack via the
unarchive functions. This is exploited using a specially crafted zip archive that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target extraction directory, resulting in the final path ending up outside of the target folder. For example, a zip may hold a file with a "../../file.exe" location, thus breaking out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code, the problem can turn into an arbitrary code execution issue.Recommendations
For archiver version all, consider disabling the
unarchive functions until a patch is available to prevent exploitation. Restrict access to sensitive files and directories to minimize the risk of arbitrary code execution. Avoid using the unarchive functions with untrusted zip archives.Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Archiver