Unrated severityNVD Advisory· Published Jun 18, 2010· Updated Apr 29, 2026
CVE-2010-0831
CVE-2010-0831
Description
Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Affected products
1- cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
16- launchpad.net/bugs/540575nvdExploit
- marc.infonvd
- marc.infonvd
- marc.infonvd
- packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelognvd
- secunia.com/advisories/42892nvd
- secunia.com/advisories/50786nvd
- security.gentoo.org/glsa/glsa-201209-21.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.osvdb.org/65467nvd
- www.redhat.com/support/errata/RHSA-2011-0025.htmlnvd
- www.securityfocus.com/bid/41006nvd
- www.vupen.com/english/advisories/2010/1553nvd
- www.vupen.com/english/advisories/2011/0121nvd
- bugzilla.redhat.com/show_bug.cginvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.