The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote     attackers to delete arbitrary files via a symlink attack on a folder in an archive. (CVE-2016-7162)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the version of the file-roller packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The _g_file_remove_directory function in file-utils.c     in File Roller 3.5.4 through 3.20.2 allows remote     attackers to delete arbitrary files via a symlink     attack on a folder in an archive.(CVE-2016-7162)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

reports :

File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive.

This update for file-roller fixes the following issue :

  - CVE-2016-7162: Do not follow symlinks when deleting a     folder recursively. (boo#997822, bgo#698554)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3074-1 advisory.

    It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a     specially-crafted archive, an attacker could delete files outside of the extraction directory.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
220022	Linux Distros Unpatched Vulnerability : CVE-2016-7162	Nessus	Misc.	Local	high
140902	EulerOS 2.0 SP3 : file-roller (EulerOS-SA-2020-2135)	Nessus	Huawei Local Security Checks	Local	high
93988	FreeBSD : file-roller -- path traversal vulnerability (ad479f89-9020-11e6-a590-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	Local	high
93599	openSUSE Security Update : file-roller (openSUSE-2016-1097)	Nessus	SuSE Local Security Checks	Local	high
93398	Ubuntu 14.04 LTS / 16.04 LTS : File Roller vulnerability (USN-3074-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2016-7162

high

Tenable Plugins

high

high

high

high

high