debian/arc vulnerabilities

Latest debian/arc CVEs

Newest publication first

1. CVE-2015-9275 ARC 5.21q allows directory traversal via a full pathname in an archive file.

   Published 2019-01-07

   Medium·CVSS 5.3 EPSS 2.4%

   ARC 5.21q allows directory traversal via a full pathname in an archive file.

2. CVE-2005-2992 arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.

   Published 2005-10-13

   Low·CVSS 2.1 EPSS 0.36%

   arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945.

3. DSA-843-1 arc - insecure temporary file

   Published 2005-10-05

   Unknown

4. CVE-2005-2945 arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

   Published 2005-09-16

   Low·CVSS 2.1 EPSS 0.36%

   arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by (1) arc (arc.c) or (2) marc (marc.c).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.