Security Advisory

CVE-2001-1270

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2002-05-03 04:00:00
Last updated 2024-08-08 04:51:07
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.