Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdkUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-src | Dec 1, 2016 | May 2, 2005 |
| Freebsd | — | Upgrade linux-blackdown-jdkUpgrade diablo-jdkUpgrade linux-ibm-jdkUpgrade diablo-jdk-freebsd6Upgrade linux-sun-jdkUpgrade jdkUpgrade linux-jdk | Dec 10, 2025 | Apr 16, 2005 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-srcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-headless | Oct 16, 2024 | Apr 12, 2005 |
| Ubuntu | — | Upgrade openjdk-6 | Nov 19, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub