p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.

Fix CVE-2015-1038 (#1179505)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Alexander Cherepanov reports :

7z (and 7zr) is susceptible to a directory traversal vulnerability.
While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write files outside the current directory.

This update fixes the following security issue :

  - CVE-2015-1038: directory traversal vulnerability     [bnc#912878]

    This could for the overwriting of arbitrary files     through uncompressing a crafted archive, with the     privileges of the user running 7z

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

p7zip was update to fix one security issue.

The following vulnerability was fixed :

  - CVE-2015-1038: Attackers could have written to arbitrary     files via a symlink attack in a specially crafted     archive (boo#912878)

Alexander Cherepanov discovered that p7zip is susceptible to a directory traversal vulnerability. While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write files outside the current directory.

Alexander Cherepanov discovered that p7zip is susceptible to a directory traversal vulnerability. While extracting an archive, it will extract symlinks and then follow them if they are referenced in further entries. This can be exploited by a rogue archive to write files outside the current directory.

For the oldoldstable distribution (squeeze), this problem has been fixed in version 9.04~dfsg.1-1+deb6u1.

For the oldstable distribution (wheezy) and stable distribution (jessie), this problem will be fixed soon.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
89466	Fedora 23 : p7zip-15.09-4.fc23 (2015-fadaa9953e)	Nessus	Fedora Local Security Checks	medium
89424	Fedora 22 : p7zip-15.09-4.fc22 (2015-d5cc306730)	Nessus	Fedora Local Security Checks	medium
85966	FreeBSD : p7zip -- directory traversal vulnerability (8f5c9dd6-5cac-11e5-9ad8-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	medium
85647	SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2015:1433-1)	Nessus	SuSE Local Security Checks	medium
84497	openSUSE Security Update : p7zip (openSUSE-2015-456)	Nessus	SuSE Local Security Checks	medium
84200	Debian DSA-3289-1 : p7zip - security update	Nessus	Debian Local Security Checks	medium
84166	Debian DLA-245-1 : p7zip security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2015-1038

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium