CVE-2006-0950

Published: 13 March 2006

unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.

Priority

Package	Release	Status
unalz Launchpad, Ubuntu, Debian	dapper	Released (0.55-1)
	edgy	Released (0.55-1)
	feisty	Released (0.55-1)
	upstream	Needs triage

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.