Vulnerability CVE-2006-0926
Published: 2006-02-28   Modified: 2012-02-12

Description:
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.

Type:

CWE-Other

CVSS2 => (AV:N/AC:H/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.6/10
2.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
Smithmicro -> Stuffit deluxe 
Smithmicro -> Stuffit expander 
Smithmicro -> Stuffit standard 
Smithmicro -> Zipmagic deluxe 

 References:
http://www.hamid.ir/security/stuffit.txt
http://www.securityfocus.com/archive/1/425972/100/0/threaded
http://www.securityfocus.com/bid/16806
http://www.vupen.com/english/advisories/2006/0732
https://exchange.xforce.ibmcloud.com/vulnerabilities/24886
Copyright 2024, cxsecurity.com

 

Back to Top