Hacker News Reader

I'm pretty sure this has been known for a long time. This was the method used to jailbreak some Windows Phones back in the day -- extract an archive that overwrites carrier OMA files. Iirc you could just rename a folder in 7-zip to "../../foo" and it would work. No special tools required.

View on HN

This class of vulnerabilites (directory traversal in an unarchiver) has been known at least since 2001:

https://nvd.nist.gov/vuln/detail/CVE-2001-1268 (Info-ZIP unzip)

https://nvd.nist.gov/vuln/detail/CVE-2001-1270 (PKZip)

https://nvd.nist.gov/vuln/detail/CVE-2001-1271 (rar)

> I'm pretty sure this has been known for a long time.

It has, but that so many libraries are still vulnerable by default means it hasn't exactly stuck.

Reply on news.ycombinator.com