Path traversal in Debian Linux - CVE-2017-1000472
Published: January 3, 2018 / Updated: August 8, 2020
Vulnerability identifier: #VU37713
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-1000472
CWE-ID: CWE-22
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to manipulate data.
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".
Affected software
Debian Linux
Fedora
poco
Fedora
poco
How to mitigate CVE-2017-1000472
Install update from vendor's website.
poco - addressed in versions 1.6.1-3.el7, 1.7.8p3-3.fc26, 1.7.8p3-3.fc27