On Wed, Oct 02, 2002 at 05:32:24PM +0200, Tulipánt Gergely wrote:
> Beware, tho. Unzip 5.50 causes tempfail (see the subject) if the zip has
> password protected files.
? That can only happen if unzip isn't running with the "-P" option. What is
$unzip_options set to? (should be "-Px"). Did
See http://www.info-zip.org/pub/infozip/UnZip.html (I can only access it
cached on google.com).
"Note that all versions of UnZip prior to 5.50 (i.e., 5.42 and earlier)
have a directory-traversal vulnerability that allows them to unpack files
in unexpected places."
Beware, tho. Unzip 5.50
