CVE-2001-1270

LOW 2.1CVE-2001-1270 · Published 12/07/2001 · updated 16/06/2026

In short

CVE-2001-1270 is a LOW (CVSS 2.1) vulnerability affecting pkzip (pkware).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 47.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pkzip pkware	`≤ 4.00`	No fix yet

Description

Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.

References

online.securityfocus.com/archive/1/196445 · Exploit
security.nnov.ru/advisories/archdt.asp · Exploit

More vulnerabilities in pkzip

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free