CVE-2018-20250— WinRar 路径遍历漏洞
已观察到在野利用 cisa_kev · confirmed
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2018-20250 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
绝对路径遍历
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
WinRar 路径遍历漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
WinRAR是一款文件压缩器。该产品支持RAR、ZIP等格式文件的压缩和解压等。 WinRar中存在目录遍历漏洞。该漏洞源于WinRAR在解压处理ACE格式的文件过程中，未对ACE文件头结构中的“filename”字段进行充分过滤。攻击者可利用该漏洞以提升的权限执行任意代码。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Check Point Software Technologies Ltd. | WinRAR | All versions prior and including 5.61 | - |
二、漏洞 CVE-2018-20250 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | exp for https://research.checkpoint.com/extracting-code-execution-from-winrar | https://github.com/WyAtu/CVE-2018-20250 | POC详情 |
| 2 | 010 Editor template for ACE archive format & CVE-2018-2025[0-3] | https://github.com/QAX-A-Team/CVE-2018-20250 | POC详情 |
| 3 | None | https://github.com/nmweizi/CVE-2018-20250-poc-winrar | POC详情 |
| 4 | A version of the binary patched to address CVE-2018-20250 | https://github.com/blunden/UNACEV2.DLL-CVE-2018-20250 | POC详情 |
| 5 | Proof of concept code in C# to exploit the WinRAR ACE file extraction path (CVE-2018-20250). | https://github.com/easis/CVE-2018-20250-WinRAR-ACE | POC详情 |
| 6 | None | https://github.com/STP5940/CVE-2018-20250 | POC详情 |
| 7 | WinRar is a very widely known software for windows. Previous version of WinRaR was a vulnerability which has been patched in Feb-2019. Most of the people didn't update winrar so they are vulnerable in this Absolute Path Traversal bug [CVE-2018-20250] | https://github.com/technicaldada/hack-winrar | POC详情 |
| 8 | Python tool exploiting CVE-2018-20250 found by CheckPoint folks | https://github.com/Ektoplasma/ezwinrar | POC详情 |
| 9 | CVE-2018-20250-WINRAR-ACE Exploit with a UI | https://github.com/arkangel-dev/CVE-2018-20250-WINRAR-ACE-GUI | POC详情 |
| 10 | None | https://github.com/AeolusTF/CVE-2018-20250 | POC详情 |
| 11 | Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250 | https://github.com/joydragon/Detect-CVE-2018-20250 | POC详情 |
| 12 | This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250 | https://github.com/DANIELVISPOBLOG/WinRar_ACE_exploit_CVE-2018-20250 | POC详情 |
| 13 | None | https://github.com/likescam/CVE-2018-20250 | POC详情 |
| 14 | CVE-2018-20250漏洞利用 | https://github.com/lxg5763/cve-2018-20250 | POC详情 |
| 15 | CVE-2018-20250 | https://github.com/zeronohacker/CVE-2018-20250 | POC详情 |
| 16 | None | https://github.com/tzwlhack/CVE-2018-20250 | POC详情 |
| 17 | None | https://github.com/tannlh/CVE-2018-20250 | POC详情 |
| 18 | None | https://github.com/LamSonBinh/CVE-2018-20250 | POC详情 |
| 19 | None | https://github.com/winrar-7/CVE-2018-20250-WinRAR-ACE | POC详情 |
| 20 | This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250 | https://github.com/H4xl0r/WinRar_ACE_exploit_CVE-2018-20250 | POC详情 |
| 21 | None | https://github.com/likekabin/CVE-2018-20250 | POC详情 |
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2018-20250 的情报信息
请登录查看更多情报信息。
CVE-2018-20250 厂商安全公告 (1)
CVE-2018-20250 公开利用代码 (1)
CVE-2018-20250 其他参考 (3)
- https://github.com/blau72/CVE-2018-20250-WinRAR-ACEx_refsource_MISC
同批安全公告 · Check Point Software Technologies Ltd. · 2019-02-05 · 共 13 条
| CVE-2018-20251 | WinRAR 路径遍历漏洞 | |
| CVE-2018-20252 | WinRAR 缓冲区错误漏洞 | |
| CVE-2018-8791 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8792 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8793 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8794 | rdesktop 输入验证错误漏洞 | |
| CVE-2018-8795 | rdesktop 输入验证错误漏洞 | |
| CVE-2018-8796 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8797 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8798 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8799 | rdesktop 缓冲区错误漏洞 | |
| CVE-2018-8800 | rdesktop 缓冲区错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-20250
暂无评论