REDHAT-BUG-725764: Path Traversal
A path traversal flaw was found in the way Ark, the tool for managing various archive formats within the KDE environment, processed certain Zip archives. A remote attacker could provide a specially-crafted Zip archive, which once opened in the Ark GUI frontend would lead to arbitrary file being opened or, potentially, if the local victim provided correct user credentials could allow that file to be removed.
References: [1] http://www.openwall.com/lists/oss-security/2011/07/25/9 [2] https://bugzilla.novell.com/showbug.cgi?id=708268
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability description for REDHAT-BUG-725764?
REDHAT-BUG-725764 describes a path traversal flaw in KDE Ark that allows arbitrary file access through specially-crafted Zip archives.
What is the severity of REDHAT-BUG-725764?
The severity level of REDHAT-BUG-725764 can vary based on the system configuration and the privileges of the attacker, but it is considered significant due to the potential for unauthorized file access.
How do I fix REDHAT-BUG-725764?
To fix REDHAT-BUG-725764, update KDE Ark to the latest version where the vulnerability has been patched.
Who is affected by REDHAT-BUG-725764?
Users of the KDE Ark tool for managing archive formats are affected by REDHAT-BUG-725764.
Can REDHAT-BUG-725764 be exploited remotely?
Yes, REDHAT-BUG-725764 can be exploited remotely if an attacker sends a maliciously crafted Zip archive to a target user.