Debian/fastjar: unknown
Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname c
Action: Upgrade fastjar to 2:0.98-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:0.98-3 | - |
Fixed versions
| 2:0.98-3 |
Sources
published · modified · JSON