Unrated severityNVD Advisory· Published Feb 28, 2006· Updated Jun 16, 2026

CVE-2006-0932

Description

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive.

Affected products

Pear/Pear Archive Zip2 versions
cpe:2.3:a:pear:pear_archive_zip:1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pear:pear_archive_zip:1.1:*:*:*:*:*:*:*
- (no CPE)range: =0.1.1

Patches

Vulnerability mechanics

References

www.hamid.ir/security/phpzip.txtnvdVendor Advisory
securityreason.com/securityalert/486nvd
www.securityfocus.com/archive/1/425967/100/0/threadednvd
www.securityfocus.com/archive/1/426153/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/24972nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000