CVE-2005-0329

Published: May 2, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in ZipGenius 5.5 and earlier allows remote attackers to create and possibly modify arbitrary files via a ZIP file with a file whose name includes .. (dot dot) sequences.

Affected (2)

Products: Zipgenius: Zipgenius

Zipgenius

1 product

Zipgenius

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Zipgenius Zipgenius	Version standard_5.5
Zipgenius Zipgenius	Version suite_5.5

References (12)

http://marc.info/?l=bugtraq&m=110736990230696&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14123

Source: cve@mitre.org

http://securitytracker.com/id?1013542

Source: cve@mitre.org

Patch

http://www.7a69ezine.org/node/view/195

Source: cve@mitre.org

http://www.securityfocus.com/bid/12419

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/19203

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110736990230696&w=2