CVE-2004-0916
Fixed in a distro release EPSS 4%
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
Products: cabextract_project cabextract
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cabextract | 1.1-1 |
| Debian 13 | cabextract | 1.1-1 |
| Debian 14 | cabextract | 1.1-1 |
| Debian 3.0 | cabextract | 0.2-2b |