Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the     display of arbitrary files via .. (dot dot) sequences in a zip file. (CVE-2011-2725)

Note that Nessus relies on the presence of the package as reported by the vendor.

Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed (CVE-2011-2725).

Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed.
(CVE-2011-2725)

Tim Brown discovered that Ark did not properly perform input validation when previewing archive files. If a user were tricked into opening a crafted archive file, an attacker could remove files via directory traversal.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tim Brown from Nth Dimention reports :

I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this does not allow the wrong file to be overwritten, after closing the default view, Ark will then attempt to delete the temporary file which could result in the deletion of the incorrect file.

ID	Name	Product	Family	Severity
217514	Linux Distros Unpatched Vulnerability : CVE-2011-2725	Nessus	Misc.	high
75792	openSUSE Security Update : ark (openSUSE-SU-2012:0322-1)	Nessus	SuSE Local Security Checks	medium
58263	SuSE 11.1 Security Update : ark (SAT Patch Number 5906)	Nessus	SuSE Local Security Checks	medium
56919	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : kdeutils vulnerability (USN-1276-1)	Nessus	Ubuntu Local Security Checks	medium
56806	FreeBSD : kdeutils4 -- Directory traversal vulnerability (7fb9e739-0e6d-11e1-87cd-00235a5f2c9a)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2011-2725

high

Tenable Plugins

high

medium

medium

medium

medium