FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-1080

This CVE name corresponds to:

Entered	Topic
2005-04-16	jdk -- jar directory traversal vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-1080 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-1080
Phase	Assigned(20050412)

Description

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2, 1.5 allows remote attackers to write arbitrary files via a .. (dot dot) in filenames in a .jar file.

References

Source	Reference
BUGTRAQ	20050412 7a69Adv#23 - Jar tool directory transversal vulnerability
MISC	http://www.securiteam.com/securitynews/5IP0C0AFGW.html
SECUNIA	14902