Path traversal in Codehaus Plexus - CVE-2018-1002200

Vulnerability identifier: #VU13327

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1002200

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to overwrite arbitrary files on the target system.

The vulnerability exists due to directory traversal flaw. A remote unauthenticated attacker can use a specially crafted Zip archive, extract the valid user and overwrite any file.

Codehaus Plexus
Debian Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux EUS Compute Node
Fedora
plexus-archiver

Install update from vendor's website.

plexus-archiver - addressed in versions 3.4-4.fc27, 3.5-6.fc28

• https://github.com/codehaus-plexus/plexus-archiver/pull/87

• Debian update for plexus-archiver
• Red Hat update for plexus-archiver
• Fedora 27 update for plexus-archiver
• Fedora 28 update for plexus-archiver