Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-develUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-demoUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk | Dec 1, 2016 | May 2, 2005 |
| Freebsd | — | Upgrade linux-ibm-jdkUpgrade diablo-jdk-freebsd6Upgrade diablo-jdkUpgrade linux-blackdown-jdkUpgrade linux-jdkUpgrade jdkUpgrade linux-sun-jdk | Dec 10, 2025 | Apr 16, 2005 |
| Oracle_linux | — | Upgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.6.0-openjdkUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-srcUpgrade java-1.6.0-openjdk-develUpgrade java-1.6.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk | Oct 16, 2024 | Apr 12, 2005 |
| Ubuntu | — | Upgrade openjdk-6 | Nov 19, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub