CVE-2004-1027

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.htmlThird Party Advisory
http://lwn.net/Articles/121827/Third Party Advisory
http://security.gentoo.org/glsa/glsa-200411-29.xmlThird Party Advisory
http://www.debian.org/security/2005/dsa-628Third Party Advisory
http://www.debian.org/security/2005/dsa-652Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-007.htmlThird Party Advisory
http://www.securityfocus.com/bid/11436Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17684VDB Entry
http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.htmlThird Party Advisory
http://lwn.net/Articles/121827/Third Party Advisory
http://security.gentoo.org/glsa/glsa-200411-29.xmlThird Party Advisory
http://www.debian.org/security/2005/dsa-628Third Party Advisory
http://www.debian.org/security/2005/dsa-652Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-007.htmlThird Party Advisory
http://www.securityfocus.com/bid/11436Patch, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17684VDB Entry

Timeline

Published: Mar 1, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-10287.2Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modif CVE-2004-10299.3The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly rest CVE-2004-10302.1fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup wit CVE-2004-10317.2fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary conf CVE-2004-10322.1fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty file CVE-2004-10332.1Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restriction CVE-2004-103410.0Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to CVE-2004-10356.4Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow CVE-2004-10366.8Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier,CVE-2004-103710.0The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.CVE-2004-10387.2A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a CVE-2004-10395.0The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attac