Test ID:	1.3.6.1.4.1.25623.1.0.891440
Category:	Debian Local Security Checks
Title:	Debian LTS: Security Advisory for libarchive-zip-perl (DLA-1440-1)
Summary:	The libarchive-zip-perl package is vulnerable to a directory traversal;attack in Archive::Zip. It was found that the Archive::Zip module did;not properly sanitize paths while extracting zip files. An attacker;able to provide a specially crafted archive for processing could use;this flaw to write or overwrite arbitrary files in the context of the;Perl interpreter.
Description:	Summary: The libarchive-zip-perl package is vulnerable to a directory traversal attack in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the Perl interpreter. Affected Software/OS: libarchive-zip-perl on Debian Linux Solution: For Debian 8 'Jessie', this problem has been fixed in version 1.39-1+deb8u1. We recommend that you upgrade your libarchive-zip-perl packages. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10860
Copyright	Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.