ARJ Software UNARJ Remote Directory Traversal Vulnerability

Bugtraq ID:	11436
Class:	Input Validation Error
CVE:	CVE-2004-1027
Remote:	Yes
Local:	No
Published:	Oct 16 2004 12:00AM
Updated:	Jul 12 2009 05:56PM
Credit:	Disclosure of this issue is credited to Doubles.
Vulnerable:	RedHat Enterprise Linux WS 2.1 RedHat Enterprise Linux ES 2.1 RedHat Advanced Workstation for the Itanium Processor 2.1 Red Hat Enterprise Linux AS 2.1 Gentoo Linux Avaya CVLAN ARJ Software Inc. UNARJ 2.65 ARJ Software Inc. UNARJ 2.64 + Red Hat Fedora Core2 ARJ Software Inc. UNARJ 2.63 a + Red Hat Fedora Core2 + Red Hat Fedora Core1 + RedHat Linux 9.0 i386 + RedHat Linux 7.3 i386 ARJ Software Inc. UNARJ 2.62 + Red Hat Fedora Core2 ARJ Software Inc. UNARJ 2.43 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0

Not Vulnerable: