[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-1002208 -- mono

ID: oval:org.secpod.oval:def:2000434Date: (C)2019-04-23   (M)2021-06-06
Class: VULNERABILITYFamily: unix




sharplibzip before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as "Zip-Slip".

Platform:
Debian 8.x
Debian 9.x
Product:
libmono-2.0-dev
mono-reference-assemblies-2.0
Reference:
CVE-2018-1002208
CVE    1
CVE-2018-1002208
CPE    4
cpe:/a:mono-project:libmono-2.0-dev
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
cpe:/a:mono-project:mono-reference-assemblies-2.0
...

© SecPod Technologies