CVE-2004-2643 - Vulnerability Details - OpenCVE

Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity High

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	Cabarc

Configuration 1 [-]

cpe:2.3:a:microsoft:cabarc:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html
http://marc.info/?l=bugtraq&m=109759710121018&w=2
http://packetstormsecurity.org/0410-exploits/cabarc.txt
http://secunia.com/advisories/12816
http://securitytracker.com/id?1011626
http://www.osvdb.org/10714
http://www.securityfocus.com/bid/11376
https://exchange.xforce.ibmcloud.com/vulnerabilities/17693

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-12-04T22:00:00

Updated: 2024-08-08T01:36:24.957Z

Reserved: 2005-12-04T00:00:00

Link: CVE-2004-2643

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2004-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2004-2643

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-10-12T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via \"../\" sequences in file names in a CAB archive."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-19T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1011626", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1011626"}, {"name": "11376", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/11376"}, {"name": "10714", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/10714"}, {"name": "20041012 Microsoft cabarc directory traversal", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html"}, {"name": "12816", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/12816"}, {"name": "cabarc-dotdot-directory-traversal(17693)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17693"}, {"name": "20041012 Microsoft cabarc directory traversal", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=109759710121018&w=2"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.org/0410-exploits/cabarc.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2643", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via \"../\" sequences in file names in a CAB archive."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1011626", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1011626"}, {"name": "11376", "refsource": "BID", "url": "http://www.securityfocus.com/bid/11376"}, {"name": "10714", "refsource": "OSVDB", "url": "http://www.osvdb.org/10714"}, {"name": "20041012 Microsoft cabarc directory traversal", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html"}, {"name": "12816", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/12816"}, {"name": "cabarc-dotdot-directory-traversal(17693)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17693"}, {"name": "20041012 Microsoft cabarc directory traversal", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=109759710121018&w=2"}, {"name": "http://packetstormsecurity.org/0410-exploits/cabarc.txt", "refsource": "MISC", "url": "http://packetstormsecurity.org/0410-exploits/cabarc.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:36:24.957Z"}, "title": "CVE Program Container", "references": [{"name": "1011626", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1011626"}, {"name": "11376", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/11376"}, {"name": "10714", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/10714"}, {"name": "20041012 Microsoft cabarc directory traversal", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html"}, {"name": "12816", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/12816"}, {"name": "cabarc-dotdot-directory-traversal(17693)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17693"}, {"name": "20041012 Microsoft cabarc directory traversal", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=109759710121018&w=2"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.org/0410-exploits/cabarc.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2643", "datePublished": "2005-12-04T22:00:00", "dateReserved": "2005-12-04T00:00:00", "dateUpdated": "2024-08-08T01:36:24.957Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:cabarc:*:*:*:*:*:*:*:*", "matchCriteriaId": "7BD1E76E-337D-45E5-96C8-EE86C001191B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via \"../\" sequences in file names in a CAB archive."}], "id": "CVE-2004-2643", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 3.7, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 1.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": true, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=109759710121018&w=2"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://packetstormsecurity.org/0410-exploits/cabarc.txt"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://secunia.com/advisories/12816"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1011626"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/10714"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/11376"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17693"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=109759710121018&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://packetstormsecurity.org/0410-exploits/cabarc.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://secunia.com/advisories/12816"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1011626"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/10714"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/11376"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17693"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}