CVE-2015-0557: Path Traversal
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0557?
CVE-2015-0557 is classified as a high-severity vulnerability due to its potential for absolute path traversal attacks.
How do I fix CVE-2015-0557?
To mitigate CVE-2015-0557, users should update their ARJ archiver to version 3.10.22-24 or later.
What software is affected by CVE-2015-0557?
CVE-2015-0557 affects the ARJ archiver versions up to and including 3.10.22 on various Debian and Fedora installations.
What kind of attack can CVE-2015-0557 allow?
CVE-2015-0557 allows remote attackers to conduct absolute path traversal attacks, giving them the ability to write to arbitrary files.
Is CVE-2015-0557 still a concern for users of ARJ archiver?
Yes, CVE-2015-0557 remains a concern for users who have not upgraded to the patched versions of the ARJ archiver.