Title: PKZip Tar Hostile Destination Path Vulnerability
Severity: HIGH
Description:
PKZip is prone to a security vulnerability when unpacking .tar archives. The problem is in the handling of pathnames.
By specifying a path for an archived item which points outside the expected directory scope, the creator of the archive can cause the file to be extracted to arbitrary locations on the filesystem. An attacker may take advantage of this vulnerability to cause malicious files to be placed anywhere on a target filesystem.
An attacker may exploit this condition by specifying a relative extraction path in a malicious .tar that points to sensitive or critical files, such as system binaries.
This issue was reported in PKZip for Microsoft Windows platforms. It is not known if other platforms are also affected.
This issue is similar to the issue described in Bugtraq ID 5933, but affects how .tar archives are handled specifically.
This vulnerability was originally described in BID 6412 "Multiple Vendor Archiving Software Tar Hostile Destination Path Vulnerability" and is now being assigned an individual Bugtraq ID.
Affected Products:
- PKWare PKZip 5.0.0
- PKWare PKZip 5.0.00.01
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
