CVE-2015-0557

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435", "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774435", "tags": ["Exploit"], "refsource": "CONFIRM"}, {"url": "http://www.openwall.com/lists/oss-security/2015/01/05/9", "name": "[oss-security] 20150105 Re: CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash", "tags": [], "refsource": "MLIST"}, {"url": "http://www.openwall.com/lists/oss-security/2015/01/03/5", "name": "[oss-security] 20150103 CVE Request: arj: symlink directory traversal and directory traversal via //multiple/leading/slash", "tags": [], "refsource": "MLIST"}, {"url": "http://www.debian.org/security/2015/dsa-3213", "name": "DSA-3213", "tags": [], "refsource": "DEBIAN"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:201", "name": "MDVSA-2015:201", "tags": [], "refsource": "MANDRIVA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html", "name": "FEDORA-2015-5603", "tags": [], "refsource": "FEDORA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html", "name": "FEDORA-2015-5546", "tags": [], "refsource": "FEDORA"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html", "name": "FEDORA-2015-5524", "tags": [], "refsource": "FEDORA"}, {"url": "http://www.securityfocus.com/bid/71895", "name": "71895", "tags": [], "refsource": "BID"}, {"url": "https://security.gentoo.org/glsa/201612-15", "name": "GLSA-201612-15", "tags": [], "refsource": "GENTOO"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-0557", "ASSIGNER": "security@debian.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-04-08T18:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:arj_software:arj_archiver:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.10.22"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-01T01:29Z"}