CVE-2006-0932 - Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive

Published Feb 28, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.89%

Description

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://securityreason.com/securityalert/486
third-party-advisoryx_refsource_SREASON
http://www.hamid.ir/security/phpzip.txt
x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/425967/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/426153/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/24972
vdb-entryx_refsource_XF

Link	Providers	Tags
http://securityreason.com/securityalert/486		third-party-advisoryx_refsource_SREASON
http://www.hamid.ir/security/phpzip.txt		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/425967/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/426153/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/24972		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 28, 2006

Updated Aug 7, 2024

Reserved Feb 28, 2006

Link CVE-2006-0932

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0932

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0932