CVE-2018-10886

Related Files

Debian Security Advisory 4255-1

Posted Jul 25, 2018

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4255-1 - Danny Grander reported that the unzip and untar tasks in ant, a Java based build tool like make, allow the extraction of files outside a target directory. An attacker can take advantage of this flaw by submitting a specially crafted Zip or Tar archive to an ant build to overwrite any file writable by the user running ant.

tags | advisory, java

systems | linux, debian

advisories | CVE-2018-10886

SHA-256 | 8712be2e985d62f6d793b6f112814849d622e01949bc463e0dd6bc737ba4fcf8

Download | Favorite | View

Ubuntu Security Notice USN-3721-1

Posted Jul 25, 2018

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3721-1 - Danny Grander discovered that Apache Ant incorrectly handled certain compressed files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to overwrite arbitrary files.

tags | advisory, remote, arbitrary

systems | linux, ubuntu

advisories | CVE-2018-10886

SHA-256 | e66a0dc864705a951ca9cd6e15af89c3437c46679a3edaec62b3cb2df88e449b

Download | Favorite | View