CVE-2006-5963

Published: Jan 19, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.

Affected (2)

Products: Pentaware: Pentasuite Pro, Pentazip

Pentaware

2 products

Pentasuite Pro

Pentazip

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Pentaware Pentasuite Pro	Version 8.5.1.221
Pentaware Pentazip	Version 8.5.1.190

References (12)

http://osvdb.org/32864

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/21458

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/secunia_research/2006-72/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/bid/22104

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/0235

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/31581

Source: PSIRT-CNA@flexerasoftware.com

http://osvdb.org/32864