Jcraft

jcraft

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-5725 1Jcraft 1Jsch May 13, 2026 Jan 19, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a r...Show more Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.Show less
CVE-2002-2102 1Jcraft 1Jzlib Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2016-5725

1Jcraft

1Jsch

May 13, 2026

Jan 19, 2017

N/A· v4

5.9 MEDIUM· v3

4.3 MEDIUM· v2

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a r...Show more

CVE-2002-2102

1Jcraft

1Jzlib

Apr 16, 2026

Dec 31, 2002

N/A· v4

N/A· v3

5.0 MEDIUM· v2

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.