CVE-2010-0831

Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

• CWE-22

• http://marc.info/?l=oss-security&m=127602564508766&w=2
• http://marc.info/?l=oss-security&m=127602731712034&w=2
• http://marc.info/?l=oss-security&m=127603032617644&w=2
• http://packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelog
• http://secunia.com/advisories/42892
• http://secunia.com/advisories/50786
• http://security.gentoo.org/glsa/glsa-201209-21.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:122
• http://www.osvdb.org/65467
• http://www.redhat.com/support/errata/RHSA-2011-0025.html
• http://www.securityfocus.com/bid/41006
• http://www.vupen.com/english/advisories/2010/1553
• http://www.vupen.com/english/advisories/2011/0121
• https://bugzilla.redhat.com/show_bug.cgi?id=594497
• https://bugzilla.redhat.com/show_bug.cgi?id=601823
• https://launchpad.net/bugs/540575Exploit
• http://marc.info/?l=oss-security&m=127602564508766&w=2
• http://marc.info/?l=oss-security&m=127602731712034&w=2
• http://marc.info/?l=oss-security&m=127603032617644&w=2
• http://packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelog
• http://secunia.com/advisories/42892
• http://secunia.com/advisories/50786
• http://security.gentoo.org/glsa/glsa-201209-21.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:122
• http://www.osvdb.org/65467
• http://www.redhat.com/support/errata/RHSA-2011-0025.html
• http://www.securityfocus.com/bid/41006
• http://www.vupen.com/english/advisories/2010/1553
• http://www.vupen.com/english/advisories/2011/0121
• https://bugzilla.redhat.com/show_bug.cgi?id=594497
• https://bugzilla.redhat.com/show_bug.cgi?id=601823
• https://launchpad.net/bugs/540575Exploit

Published

Jun 18, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0825lib-src/movemail.c in movemail in emacs 22 and 23 allows loc…
• CVE-2010-0826The Free Software Foundation (FSF) Berkeley DB NSS module (a…
• CVE-2010-0827Integer overflow in dvips in TeX Live 2009 and earlier, and …
• CVE-2010-0828Cross-site scripting (XSS) vulnerability in action/Despam.py…
• CVE-2010-0829Multiple array index errors in set.c in dvipng 1.11 and 1.12…
• CVE-2010-0830Integer signedness error in the elf_get_dynamic_info functio…
• CVE-2010-0832pam_motd (aka the MOTD module) in libpam-modules before 1.1.…
• CVE-2010-0833The pam_lsass library in Likewise Open 5.4 and CIFS 5.4 befo…
• CVE-2010-0834The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 …
• CVE-2010-0835Unspecified vulnerability in the Wireless component in Oracl…
• CVE-2010-0836Unspecified vulnerability in the Oracle Knowledge Management…
• CVE-2010-0837Unspecified vulnerability in the Pack200 component in Oracle…