AOH :: HP Unsorted B :: B06-2365.HTM

Bitzipper archive extraction directory traversal



BitZipper Archive Extraction Directory traversal
BitZipper Archive Extraction Directory traversal



BitZipper Archive Extraction Directory traversal 
BitZipper is an advanced data compression tool for
Windows that enables you to unzip 18 different
compression and encoding formats with superior
ease-of-use.
Create 8 different types of compressed files 

http://www.bitzipper.com 

Credit:
The information has been provided by Hamid Ebadi
admin[at]hamid[dot]ir.
The original article can be found at :
http://hamid.ir/security 

Vulnerable Systems:
BitZipper4.1.2 (and below)
[ 3.2 , 3.2.1 , 3.3 ,3.4 ,3.4.1,4.0 ,4.1,4.1 Service
Release 1 ]

Detail :

The vulnerability is caused due to an input validation
error when extracting files compressed with RAR (.rar)
or TAR (.tar) or  ZIP (.zip) or TAR.GZ (tar.gz) or GZ
(.gz) or JAR(.jar)
This makes it possible to have files extracted to
arbitrary locations outside the specified directory
using the "../" directory traversal sequence.


Solution:
Do not extract untrusted  RAR and TAR and JAR and GZ
and ZIP and TAR.GZ files.
To reduce the risk, never extract files as an
administrative user.

harmless exploit:
use HEAP [Hamid Evil Archive Pack]
you can download it from Hamid Network Security Team :

http://www.hamid.ir/tools/ 


want to know more ?
http://www.hamid.ir/paper/ 



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.