Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdk-demoUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-develUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-srcUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.7.0-openjdk-demoUpgrade java-1.6.0-openjdk-demoUpgrade java-1.6.0-openjdkUpgrade java-1.8.0-openjdk-develUpgrade java-1.6.0-openjdk-develUpgrade java-1.7.0-openjdkUpgrade java-1.8.0-openjdk | Dec 1, 2016 | May 2, 2005 |
| Freebsd | — | Upgrade diablo-jdk-freebsd6Upgrade linux-ibm-jdkUpgrade linux-blackdown-jdkUpgrade diablo-jdkUpgrade jdkUpgrade linux-sun-jdkUpgrade linux-jdk | Dec 10, 2025 | Apr 16, 2005 |
| Oracle_linux | — | Upgrade java-1.7.0-openjdkUpgrade java-1.6.0-openjdk-demoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-develUpgrade java-1.7.0-openjdk-javadocUpgrade java-1.8.0-openjdkUpgrade java-1.7.0-openjdk-accessibilityUpgrade java-1.6.0-openjdk-javadocUpgrade java-1.7.0-openjdk-develUpgrade java-1.7.0-openjdk-srcUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.7.0-openjdk-headlessUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.6.0-openjdk-srcUpgrade java-1.7.0-openjdk-demoUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.6.0-openjdkUpgrade java-1.6.0-openjdk-devel | Oct 16, 2024 | Apr 12, 2005 |
| Ubuntu | — | Upgrade openjdk-6 | Nov 19, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub