CVE-2015-2060: Path Traversal
Published Nov 29, 2019
·Updated
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.
Affected Software
2 affected components
Cabextract Project Cabextract<1.6
Linux Linux kernel
Remediation
Event History
Nov 29, 2019
CVE Published
via MITRE·08:55 PM
Data Sourced
via MITRE·08:55 PM
Description
Frequently Asked Questions
1
What is CVE-2015-2060?
CVE-2015-2060 is a vulnerability in cabextract before version 1.6 that allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character.
2
How does CVE-2015-2060 affect cabextract?
CVE-2015-2060 affects cabextract versions before 1.6.
3
How severe is CVE-2015-2060?
CVE-2015-2060 has a severity rating of medium with a score of 5.3.
4
How can I fix CVE-2015-2060?
To fix CVE-2015-2060, upgrade cabextract to version 1.6 or later.
5
Where can I find more information about CVE-2015-2060?
More information about CVE-2015-2060 can be found on the following links: [1] [2] [3]