CVE-2010-5102: Path Traversal

Published May 21, 2012

Updated

Directory traversal vulnerability in mod/tools/em/class.emunzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.

Affected Software

29 affected components

Typo3 TYPO3=4.2.10

Typo3 TYPO3=4.3.6

Typo3 TYPO3=4.2.14

Typo3 TYPO3=4.3.5

Typo3 TYPO3=4.3.8

Typo3 TYPO3=4.2.4

Typo3 TYPO3=4.2.5

Typo3 TYPO3=4.2.15

Typo3 TYPO3=4.2.11

Typo3 TYPO3=4.2.0

Typo3 TYPO3=4.3.7

Typo3 TYPO3=4.2.8

Typo3 TYPO3=4.2.13

Typo3 TYPO3=4.2.3

Typo3 TYPO3=4.4.4

Typo3 TYPO3=4.2.1

Typo3 TYPO3=4.3.2

Typo3 TYPO3=4.4.1

Typo3 TYPO3=4.4.2

Typo3 TYPO3=4.2.12

Typo3 TYPO3=4.2.6

Typo3 TYPO3=4.3.0

Typo3 TYPO3=4.2.2

Typo3 TYPO3=4.3.3

Typo3 TYPO3=4.3.4

Typo3 TYPO3=4.3.1

Typo3 TYPO3=4.2.7

Typo3 TYPO3=4.4.3

Typo3 TYPO3=4.2.9

Event History

May 21, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-5102?

CVE-2010-5102 has a medium severity rating due to its potential to allow remote attackers to write arbitrary files.

How do I fix CVE-2010-5102?

To fix CVE-2010-5102, upgrade TYPO3 to versions 4.2.16, 4.3.9, or 4.4.5 or later.

What versions of TYPO3 are affected by CVE-2010-5102?

CVE-2010-5102 affects TYPO3 versions 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5.

What type of vulnerability is CVE-2010-5102?

CVE-2010-5102 is a directory traversal vulnerability affecting the unzip library in TYPO3.

Can CVE-2010-5102 lead to a complete system compromise?

While CVE-2010-5102 can allow attackers to write arbitrary files, the extent of system compromise depends on the server configuration and subsequent exploitation.