Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk | Dec 1, 2016 | May 2, 2005 |
| Freebsd | — | Upgrade diablo-jdk-freebsd6Upgrade linux-blackdown-jdkUpgrade linux-ibm-jdkUpgrade diablo-jdkUpgrade jdkUpgrade linux-sun-jdkUpgrade linux-jdk | Dec 10, 2025 | Apr 16, 2005 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdkUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibility | Oct 16, 2024 | Apr 12, 2005 |
| Ubuntu | — | Upgrade openjdk-6 | Nov 19, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub