Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.

The GNOME file-roller archive tool was updated to fix a path traversal issue while unpacking (CVE-2013-4668). File Roller now sanitizes path names while unpacking, so that a path traversal attack cannot be used to create files outside the unpack destination directory.

This update fixes CVE-2013-4668 :

The File Roller archive manager for the GNOME desktop suffers from a path traversal vulnerability caused by insufficient path sanitization.

A specially crafted archive file can be used to trigger creation of arbitrary files in any location, writable by the user executing the extraction, outside the current working directory. This behaviour is triggered when the option 'Keep directory structure' is selected from the application 'Extract' dialog.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Yorick Koster discovered that File Roller incorrectly sanitized paths.
If a user were tricked into extracting a specially crafted archive, an attacker could create and overwrite files outside of the extraction directory.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75099	openSUSE Security Update : file-roller (openSUSE-SU-2013:1281-1)	Nessus	SuSE Local Security Checks	medium
69023	Fedora 18 : file-roller-3.6.4-1.fc18 (2013-12653)	Nessus	Fedora Local Security Checks	medium
68924	Ubuntu 12.10 / 13.04 : file-roller vulnerability (USN-1906-1)	Nessus	Ubuntu Local Security Checks	medium
68897	Fedora 19 : file-roller-3.8.3-1.fc19 (2013-12667)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-4668

high

Tenable Plugins

medium

medium

medium

medium