Every CVESearch/Get API key

CVE-2010-2322

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98...

2.6 LowFix available

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Exploit likelihood

3.23%Up 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used2.6

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE ListNo score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
Updated
2026-11-02
EUVDEUVD-2010-2332No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
EUVD-2010-2332
Updated
2026-11-03
GitHub AdvisoriesGHSA-3c39-x2h8-rmf7No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98...

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
GHSA-3c39-x2h8-rmf7
Weakness
CWE-22
Updated
2026-11-02
OSVNo score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
CVE-2010-2322
Updated
2026-11-02
OSVDEBIAN-CVE-2010-2322No score

Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.

Record
DEBIAN-CVE-2010-2322
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2021:1107-1No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:1107-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:2565-1No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)
Record
openSUSE-SU-2021:2565-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10750-1No score

fastjar-0.98-26.2 on GA media

These are all security issues fixed in the fastjar-0.98-26.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10750-1
Updated
2026-11-02
OSVSUSE-SU-2021:2635-1No score

Security update for fastjar

This update for fastjar fixes the following issues:

  • CVE-2010-2322: Fixed a directory traversal vulnerabilities. (bsc#1188517)
Record
SUSE-SU-2021:2635-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fastjar
Debian:12
before 2:0.98-3
2:0.98-3
fastjar
Debian:13
before 2:0.98-3
2:0.98-3
fastjar
Debian:14
before 2:0.98-3
2:0.98-3
gcc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-c++
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gfortran
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gnat
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-java
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc++
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
Show 40 moreShow less
Affected packages
PackageAffectedFixed
gcc-objc
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-src
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
cpp
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgfortran
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgnat
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libobjc
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
cpp
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-c++
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gfortran
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-gnat
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-java
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc++
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
gcc-objc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgcj-src
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgfortran
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libgnat
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libmudflap-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libobjc
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
libstdc++-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
before 0:4.1.2-50.el5
0:4.1.2-50.el5
fastjar
SUSE:Linux Enterprise Server 12 SP5
before 0.98-22.3.1
0.98-22.3.1
fastjar
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
before 0.98-22.3.1
0.98-22.3.1
fastjar
openSUSE:Leap 15.2
before 0.98-lp152.4.3.1
0.98-lp152.4.3.1
fastjar
openSUSE:Leap 15.3
before 0.98-3.6.2
0.98-3.6.2
fastjar
openSUSE:Tumbleweed
before 0.98-26.2
0.98-26.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-2322 is a low vulnerability (CVSS 2.6) in Matthias Klose Fastjar, published June 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. Fixed in fastjar 2:0.98-3.

References

Show 31 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open