peter bassill · operator
$ cve CVE-2003-0282 JSON

CVE-2003-0282 EXPLOIT

2.6
LOW · CVSS 2.0 · EPSS 22% (pctl 98)

Patch early

A public exploit exists.

Description

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.

Scoring

CVSS2.6 (LOW, v2.0)
VectorAV:N/AC:H/Au:N/C:N/I:P/A:N
EPSS21.96% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2003-06-16
Last modified2026-06-16

Affected (3)

VendorProduct
info-zipunzip
scoopenlinux server
scoopenlinux workstation

Public exploits

SourceTitleDate
exploit-dbInfo-ZIP UnZip 5.50 - Encoded Character Hostile Destination Path2003-05-10

References

→ the Explorer  ·  watch your stack  ·  NVD