Vulnerability DatabaseCVE-2015-0552
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2015-0552
Published:January 15, 2015
Updated:May 17, 2026
Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
Related Resources (5)
http://secunia.com/advisories/62310
https://bugzilla.gnome.org/show_bug.cgi?id=742331
http://lists.opensuse.org/opensuse-updates/2015-01/msg00018.html
http://www.openwall.com/lists/oss-security/2015/01/05/7
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774580
Do you need more information?
Contact Us
CVSS v3
Base Score:
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
LOW
CVSS v2
Base Score:
6.4
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Weakness Type (CWE)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22
EPSS
Base Score:
0.74