Executive Summary

Informations
Name CVE-2015-0556 First vendor Publication 2015-04-08
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:P)
Cvss Base Score 5.8 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink attack in an ARJ archive.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0556

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-59 Improper Link Resolution Before File Access ('Link Following')

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 3

Nessus® Vulnerability Scanner

Date Description
2017-10-20 Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_b95e5674b4d611e7b8950cc47a494882.nasl - Type : ACT_GATHER_INFO
2016-12-06 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201612-15.nasl - Type : ACT_GATHER_INFO
2015-04-22 Name : The remote Fedora host is missing a security update.
File : fedora_2015-5524.nasl - Type : ACT_GATHER_INFO
2015-04-14 Name : The remote Fedora host is missing a security update.
File : fedora_2015-5546.nasl - Type : ACT_GATHER_INFO
2015-04-13 Name : The remote Fedora host is missing a security update.
File : fedora_2015-5603.nasl - Type : ACT_GATHER_INFO
2015-04-13 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2015-201.nasl - Type : ACT_GATHER_INFO
2015-04-09 Name : The remote Debian host is missing a security update.
File : debian_DLA-188.nasl - Type : ACT_GATHER_INFO
2015-04-07 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3213.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154518.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154605.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155011.html
http://www.debian.org/security/2015/dsa-3213
http://www.mandriva.com/security/advisories?name=MDVSA-2015:201
http://www.openwall.com/lists/oss-security/2015/01/03/5
http://www.openwall.com/lists/oss-security/2015/01/05/9
http://www.securityfocus.com/bid/71860
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774434
https://security.gentoo.org/glsa/201612-15
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Date Informations
2024-11-28 12:44:49
  • Multiple Updates
2021-05-05 01:16:49
  • Multiple Updates
2021-05-04 12:36:17
  • Multiple Updates
2021-04-22 01:43:59
  • Multiple Updates
2020-05-23 01:54:21
  • Multiple Updates
2020-05-23 00:43:34
  • Multiple Updates
2017-10-21 13:25:07
  • Multiple Updates
2017-07-01 09:23:13
  • Multiple Updates
2016-12-08 09:23:34
  • Multiple Updates
2016-12-07 13:25:37
  • Multiple Updates
2016-06-29 01:16:31
  • Multiple Updates
2015-05-12 09:28:32
  • Multiple Updates
2015-04-23 13:30:38
  • Multiple Updates
2015-04-18 09:27:19
  • Multiple Updates
2015-04-15 13:28:24
  • Multiple Updates
2015-04-15 09:29:30
  • Multiple Updates
2015-04-14 13:28:52
  • Multiple Updates
2015-04-10 13:28:08
  • Multiple Updates
2015-04-10 00:25:59
  • Multiple Updates
2015-04-09 00:26:21
  • First insertion