X-Diesel Unreal Commander vulnerabilities
5 known vulnerabilities affecting x-diesel/unreal_commander.
Total CVEs
5
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2007-4545P4MEDIUMCVSS 6.8PoCv0.92_build565v0.92_build5732007-08-27
CVE-2007-4545 [MEDIUM] CWE-22 CVE-2007-4545: Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-a
Multiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow user-assisted remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a filename within a (1) ZIP or (2) RAR archive.
nvd
CVE-2007-4843P4MEDIUMCVSS 5.8PoCv0.92_build565v0.92_build5732007-09-12
CVE-2007-4843 [MEDIUM] CWE-22 CVE-2007-4843: Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote
Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a filename. NOTE: this can be leveraged for code execution by writing to a Startup folder.
nvd
CVE-2007-4546P4MEDIUMCVSS 5.8v0.92_build565v0.92_build5732007-08-27
CVE-2007-4546 [MEDIUM] CVE-2007-4546: Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP arch
Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrite or creation.
nvd
CVE-2007-4844P4MEDIUMCVSS 4.3v0.92_build565v0.92_build5732007-09-12
CVE-2007-4844 [MEDIUM] CWE-20 CVE-2007-4844: X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior
X-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's behavior after sending a "CWD /" command, which allows remote FTP servers to cause a denial of service (infinite loop) by (1) repeatedly sending a 550 error response, or (2) sending a 550 error response and then disconnecting.
nvd
CVE-2007-4547P4MEDIUMCVSS 4.3v0.92_build565v0.92_build5732007-08-27
CVE-2007-4547 [MEDIUM] CVE-2007-4547: Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extract
Unreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when extracting from an archive with malformed size information in a file header, which might allow user-assisted attackers to obtain sensitive information (memory contents) by reading the extracted files. NOTE: this issue is only a vulnerability if Unreal is run with priv
nvd