Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kdeutils: Ark path traversal (CVE-2011-2725)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kdeutils: Ark path traversal (CVE-2011-2725)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - kdeutils: Ark path traversal (CVE-2011-2725)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed (CVE-2011-2725).

Ark was prone to a path traversal vulnerability allowing a maliciously-crafted zip file to allow for an arbitrary file to be displayed and, if the user has appropriate credentials, removed.
(CVE-2011-2725)

Tim Brown discovered that Ark did not properly perform input validation when previewing archive files. If a user were tricked into opening a crafted archive file, an attacker could remove files via directory traversal.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tim Brown from Nth Dimention reports :

I recently discovered that the Ark archiving tool is vulnerable to directory traversal via malformed. When attempts are made to view files within the malformed Zip file in Ark's default view, the wrong file may be displayed due to incorrect construction of the temporary file name. Whilst this does not allow the wrong file to be overwritten, after closing the default view, Ark will then attempt to delete the temporary file which could result in the deletion of the incorrect file.

ID	Name	Product	Family	Severity
199526	RHEL 6 : kdeutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199525	RHEL 5 : kdeutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199483	RHEL 4 : kdeutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
75792	openSUSE Security Update : ark (openSUSE-SU-2012:0322-1)	Nessus	SuSE Local Security Checks	medium
58263	SuSE 11.1 Security Update : ark (SAT Patch Number 5906)	Nessus	SuSE Local Security Checks	medium
56919	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : kdeutils vulnerability (USN-1276-1)	Nessus	Ubuntu Local Security Checks	medium
56806	FreeBSD : kdeutils4 -- Directory traversal vulnerability (7fb9e739-0e6d-11e1-87cd-00235a5f2c9a)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2011-2725

high

Tenable Plugins

high

high

high

medium

medium

medium

medium