Skip to content
NewA calmer, faster ZeroHour

New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers

The Hacker Newsby @TheHackersNews ()2 min read2
Analyze CVE-2022-30333 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-30333
Directory Traversal in RARLAB UnRAR (Linux/UNIX) Enables Arbitrary File Writes
7.599%KEVRansomwarePoC ×2
KEV

From the original article

2 min read at thehackernews.com

A new security vulnerability has been disclosed in RARlab's UnRAR utility that, if successfully exploited, could permit a remote attacker to execute arbitrary code on a system that relies on the binary. The flaw, assigned the identifier CVE-2022-30333, relates to a path traversal vulnerability in the Unix versions of UnRAR that can be triggered upon extracting a maliciously crafted RAR archive.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.