Every CVE Search/ Get API key

CVE-2010-2322

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98...

2.6 LowFix available

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Exploit likelihood

3.23%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
Updated
2026-11-02
EUVDEUVD-2010-2332 No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
EUVD-2010-2332
Updated
2026-11-03
GitHub AdvisoriesGHSA-3c39-x2h8-rmf7 No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98...

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
GHSA-3c39-x2h8-rmf7
Weakness
CWE-22
Updated
2026-11-02
OSV No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
Updated
2026-11-02
OSVDEBIAN-CVE-2010-2322 No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
DEBIAN-CVE-2010-2322
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2021:1107-1 No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:1107-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2565-1 No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)
Record
openSUSE-SU-2021:2565-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10750-1 No score

fastjar-0.98-26.2 on GA media

These are all security issues fixed in the fastjar-0.98-26.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10750-1
Updated
2026-11-02
OSVSUSE-SU-2021:2635-1 No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)
Record
SUSE-SU-2021:2635-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fastjar
Debian:12
 before 2:0.98-3
2:0.98-3
fastjar
Debian:13
 before 2:0.98-3
2:0.98-3
fastjar
Debian:14
 before 2:0.98-3
2:0.98-3
gcc
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-c++
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gfortran
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gnat
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-java
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc++
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
Show 40 moreShow less
Affected packages
PackageAffectedFixed
gcc-objc
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-src
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
cpp
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcc
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgfortran
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgnat
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libobjc
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++
Red Hat:enterprise_linux:5::client
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
cpp
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-c++
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gfortran
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gnat
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-java
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc++
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcc
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-devel
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-src
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgfortran
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgnat
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap-devel
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libobjc
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++-devel
Red Hat:enterprise_linux:5::server
 before 0:4.1.2-50.el5
0:4.1.2-50.el5
fastjar
SUSE:Linux Enterprise Server 12 SP5
 before 0.98-22.3.1
0.98-22.3.1
fastjar
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.98-22.3.1
0.98-22.3.1
fastjar
openSUSE:Leap 15.2
 before 0.98-lp152.4.3.1
0.98-lp152.4.3.1
fastjar
openSUSE:Leap 15.3
 before 0.98-3.6.2
0.98-3.6.2
fastjar
openSUSE:Tumbleweed
 before 0.98-26.2
0.98-26.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2322 is a low vulnerability (CVSS 2.6) in Matthias Klose Fastjar, published June 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. Fixed in fastjar 2:0.98-3.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open