← Database

CVE-2004-1027

MEDIUM CVSS: 5.0 Published: 2005-03-01 Modified: 2026-06-16

Description

Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.

Affected Platforms

Debian Debian LinuxArjsoftware UnarjGentoo Linux

Weakness Type

NVD-CWE-Other

References