Vulnerability Description
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Smithmicro | Stuffit Deluxe | 9.0 |
| Smithmicro | Stuffit Expander | 9.0.0.21_engine_9.0.0.21 |
| Smithmicro | Stuffit Standard | 9.0 |
| Smithmicro | Zipmagic Deluxe | 9.0 |
References
- http://secunia.com/advisories/19010Vendor Advisory
- http://www.hamid.ir/security/stuffit.txt
- http://www.osvdb.org/23463
- http://www.securityfocus.com/archive/1/425972/100/0/threaded
- http://www.securityfocus.com/bid/16806
- http://www.vupen.com/english/advisories/2006/0732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24886
- http://secunia.com/advisories/19010Vendor Advisory
- http://www.hamid.ir/security/stuffit.txt
- http://www.osvdb.org/23463
- http://www.securityfocus.com/archive/1/425972/100/0/threaded
- http://www.securityfocus.com/bid/16806
- http://www.vupen.com/english/advisories/2006/0732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24886
FAQ
What is CVE-2006-0926?
CVE-2006-0926 is a vulnerability with a CVSS score of 2.6 (LOW). Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrit...
How severe is CVE-2006-0926?
CVE-2006-0926 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-0926?
Check the references section above for vendor advisories and patch information. Affected products include: Smithmicro Stuffit Deluxe, Smithmicro Stuffit Expander, Smithmicro Stuffit Standard, Smithmicro Zipmagic Deluxe.