FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-30 16:30:37 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
7fb9e739-0e6d-11e1-87cd-00235a5f2c9a	kdeutils4 -- Directory traversal vulnerability Tim Brown from Nth Dimention reports: I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this does not allow the wrong file to be overwritten, after closing the default view, Ark will then attempt to delete the temporary file which could result in the deletion of the incorrect file. Discovery 2011-10-19 Entry 2011-11-14 kdeutils >= 4.0.* lt 4.7.3 CVE-2011-2725 http://seclists.org/fulldisclosure/2011/Oct/351

VuXML ID

Description

7fb9e739-0e6d-11e1-87cd-00235a5f2c9a

kdeutils4 -- Directory traversal vulnerability

Tim Brown from Nth Dimention reports:

I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this does not allow the wrong file to be overwritten, after closing the default view, Ark will then attempt to delete the temporary file which could result in the deletion of the incorrect file.

Discovery 2011-10-19
Entry 2011-11-14
kdeutils

>= 4.0.* lt 4.7.3

CVE-2011-2725
http://seclists.org/fulldisclosure/2011/Oct/351