• info
• discussion
• exploit
• solution
• references

ARJ CVE-2015-0556 Directory Traversal Vulnerability

ARJ is prone to a directory-traversal vulnerabilities.

A remote attacker could exploit this issue using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information or to access files outside of the restricted directory to obtain sensitive information and perform other attacks.

ARJ 3.10.22-10 and 3.10.22-12 are vulnerable.