Unrated severityNVD Advisory· Published Jun 18, 2010· Updated Jun 16, 2026
CVE-2010-2322
CVE-2010-2322
Description
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*
- (no CPE)range: =0.98
- osv-coords5 versionspkg:rpm/opensuse/fastjar&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/fastjar&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/fastjar&distro=openSUSE%20Tumbleweedpkg:rpm/suse/fastjar&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/fastjar&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 0.98-lp152.4.3.1+ 4 more
- (no CPE)range: < 0.98-lp152.4.3.1
- (no CPE)range: < 0.98-3.6.2
- (no CPE)range: < 0.98-26.2
- (no CPE)range: < 0.98-22.3.1
- (no CPE)range: < 0.98-22.3.1
Patches
Vulnerability mechanics
References
12- launchpad.net/bugs/540575nvdExploit
- marc.infonvd
- packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelognvd
- secunia.com/advisories/42892nvd
- secunia.com/advisories/50786nvd
- security.gentoo.org/glsa/glsa-201209-21.xmlnvd
- www.osvdb.org/65467nvd
- www.redhat.com/support/errata/RHSA-2011-0025.htmlnvd
- www.securityfocus.com/bid/41009nvd
- www.vupen.com/english/advisories/2011/0121nvd
- bugzilla.redhat.com/show_bug.cginvd
- bugzilla.redhat.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.