KDE archive tool flaw let hackers take over Linux accounts

guest · Jul 31, 2020

KDE archive tool flaw let hackers take over Linux accounts
July 30, 2020
https://www.bleepingcomputer.com/ne...ol-flaw-let-hackers-take-over-linux-accounts/

A vulnerability exists in the default KDE extraction utility called ARK that allows attackers to overwrite files or execute code on victim's computers simply by tricking them into downloading an archive and extracting it.

Discovered by security researcher Dominik Penner of Hackers for Change, a path traversal vulnerability has been found in the default ARK archive utility that allows malicious actors to perform remote code execution by distributing malicious archives.
Penner reported this vulnerability to the KDE security team on July 20th, 2020, and the bug was quickly fixed in Ark 20.08.0, which was released today.
Click to expand...

"KDE Ark is vulnerable to an arbitrary write vulnerability leading to command execution via directory traversal. Ark fails to strip directory traversal characters when decompressing tar, gzip, bzip2, rar and zip files, ultimately allowing an attacker to silently write files into the ~/.config/autostart directory, leading to command execution on the next reboot. This vulnerability is more commonly referred to as a "Zip Slip" vulnerability," Penner wrote in a vulnerability report shared with BleepingComputer.
Click to expand...

Stupendous Man · Aug 18, 2020

Fixed in Groovy, earlier.
Now also fixed in Bionic and Focal.

KDE Project Security Advisory: Ark: maliciously crafted archive can install files outside the extraction directory.
Publishing history of ark package in Ubuntu

Stupendous Man · Sep 1, 2020

A similar vulnerability patched:

KDE Project Security Advisory: Ark: maliciously crafted TAR archive with symlinks can install files outside the extraction directory.
Publishing history of ark package in Ubuntu

Log in or Sign up

KDE archive tool flaw let hackers take over Linux accounts

guest Guest

Stupendous Man Registered Member

Stupendous Man Registered Member

Log in or Sign up

KDE archive tool flaw let hackers take over Linux accounts

guest Guest

Stupendous Man Registered Member

Stupendous Man Registered Member

Useful Searches