CVE-2007-1954

HIGH 7.5CVE-2007-1954 · Published 11/04/2007 · updated 16/06/2026

In short

CVE-2007-1954 is a HIGH (CVSS 7.5) vulnerability affecting archivexpert (archivexpert).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
archivexpert archivexpert	`= 2.02_build_80`	No fix yet

Description

Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .gz, (2) .jar, (3) .rar, (4) .tar.gz, (5) .zip, or (6) .tar file.

References

secunia.com/advisories/24827 · Vendor Advisory
bugtraq.ir/articles/advisory/archivexpert_directory_traversal/8
securityfocus.com/bid/23372
vupen.com/english/advisories/2007/1311
exchange.xforce.ibmcloud.com/vulnerabilities/33539

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free