CVE-2006-3619

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4...

2.6 LowFix available

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.

Exploit likelihood

3.90%Up 1.2 points since Feb 4, 2022

What each source reports

NVD Score used 2.6

Record: CVE-2006-3619
CVSS 2.0: 2.6 LowAV:N/AC:H/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-3619
Updated: 2026-11-02

EUVDEUVD-2006-3614 No score

Record: EUVD-2006-3614
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hrqw-pgfh-35p4 No score

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4...

Record: GHSA-hrqw-pgfh-35p4
Updated: 2026-11-02

Affected products

fastjar

Affected packages

Affected packages
Package	Affected	Fixed
`gcc-3.4` Debian:3.1	before 3.4.3-13sarge1, plus listed versions 3.4.3-13	3.4.3-13sarge1
`cpp` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-c++` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-c++-ppc32` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-debuginfo` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-g77` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-gnat` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-java` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`gcc-objc` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8

Show 123 moreShow less

Affected packages
Package	Affected	Fixed
`gcc-ppc32` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libf2c` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libgcc` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libgcj` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libgcj-devel` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libgnat` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libobjc` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libstdc++` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`libstdc++-devel` Red Hat:enterprise_linux:4::as	before 0:3.4.6-8	0:3.4.6-8
`cpp` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-c++` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-g77` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-gnat` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-java` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`gcc-objc` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libf2c` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libgcc` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libgcj` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libgcj-devel` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libgnat` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libobjc` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libstdc++` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`libstdc++-devel` Red Hat:enterprise_linux:4::desktop	before 0:3.4.6-8	0:3.4.6-8
`cpp` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-c++` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-debuginfo` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-g77` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-gnat` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-java` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`gcc-objc` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libf2c` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libgcc` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libgcj` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libgcj-devel` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libgnat` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libobjc` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libstdc++` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`libstdc++-devel` Red Hat:enterprise_linux:4::es	before 0:3.4.6-8	0:3.4.6-8
`cpp` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-c++` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-g77` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-gnat` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-java` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`gcc-objc` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libf2c` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libgcc` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libgcj` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libgcj-devel` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libgnat` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libobjc` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libstdc++` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`libstdc++-devel` Red Hat:enterprise_linux:4::ws	before 0:3.4.6-8	0:3.4.6-8
`cpp` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-c++` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-c++-ppc32` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-debuginfo` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-g77` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-gnat` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-java` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-objc` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`gcc-ppc32` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libf2c` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libgcc` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libgcj` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libgcj-devel` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libgnat` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libobjc` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libstdc++` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`libstdc++-devel` Red Hat:enterprise_linux:3::as	before 0:3.2.3-59	0:3.2.3-59
`cpp` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-c++` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-g77` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-gnat` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-java` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`gcc-objc` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libf2c` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libgcc` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libgcj` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libgcj-devel` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libgnat` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libobjc` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libstdc++` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`libstdc++-devel` Red Hat:enterprise_linux:3::desktop	before 0:3.2.3-59	0:3.2.3-59
`cpp` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-c++` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-debuginfo` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-g77` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-gnat` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-java` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`gcc-objc` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libf2c` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libgcc` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libgcj` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libgcj-devel` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libgnat` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libobjc` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libstdc++` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`libstdc++-devel` Red Hat:enterprise_linux:3::es	before 0:3.2.3-59	0:3.2.3-59
`cpp` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-c++` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-g77` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-gnat` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-java` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`gcc-objc` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libf2c` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libgcc` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libgcj` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libgcj-devel` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libgnat` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libobjc` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libstdc++` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59
`libstdc++-devel` Red Hat:enterprise_linux:3::ws	before 0:3.2.3-59	0:3.2.3-59

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-3619 is a low vulnerability (CVSS 2.6) in Fastjar, published July 25, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.90%, the 90th percentile. Fixed in gcc-3.4 3.4.3-13sarge1.

References

Show 38 moreShow less