Approved changes feed: RSS · Atom

cpe:2.3:a:matthias_klose:fastjar:0.98:*:*:*:*:*:*:*

part: a version: 0.98 update: *

VendorMatthias Klose (b784bd85-0b72-54f7-8cfc-7386ade78d5f)
ProductFastjar (9abe3a52-fa06-5ca1-8beb-ed6743287e3c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2322 vulnerable 2026-06-08 04:55:06.773896 Details available
Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Published: 2010-06-18T18:00:00.000Z
Updated: 2024-08-07T02:32:16.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0831 vulnerable 2026-06-08 04:52:04.648427 Details available
Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
Published: 2010-06-18T18:00:00.000Z
Updated: 2024-08-07T00:59:39.351Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.