CVE-2006-3619

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-25 · updated 2026-06-16

Description

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.

Affected products

Fastjar: 0.93

References

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=28359
http://lists.debian.org/debian-gcc/2006/05/msg00317.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://rhn.redhat.com/errata/RHSA-2007-0473.html
http://secunia.com/advisories/17839
http://secunia.com/advisories/21100
http://secunia.com/advisories/21797
http://secunia.com/advisories/25098
http://secunia.com/advisories/25281
http://secunia.com/advisories/25633
http://secunia.com/advisories/25894

Get alerted when CVE-2006-3619 or the next vulnerability affects your stack