CVE-2006-5963

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.

Date published : 2007-01-18

http://www.securityfocus.com/bid/22104

http://secunia.com/secunia_research/2006-72/advisory/