CVE-2006-5963

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-19 · updated 2026-06-16

Description

Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.

Affected products

Pentaware Pentasuite-Pro: 8.5.1.221
Pentaware Pentazip: 8.5.1.190

References

http://osvdb.org/32864
http://secunia.com/advisories/21458
http://secunia.com/secunia_research/2006-72/advisory/
http://www.securityfocus.com/bid/22104
http://www.vupen.com/english/advisories/2007/0235
https://exchange.xforce.ibmcloud.com/vulnerabilities/31581
http://osvdb.org/32864
http://secunia.com/advisories/21458
http://secunia.com/secunia_research/2006-72/advisory/
http://www.securityfocus.com/bid/22104
http://www.vupen.com/english/advisories/2007/0235
https://exchange.xforce.ibmcloud.com/vulnerabilities/31581

Get alerted when CVE-2006-5963 or the next vulnerability affects your stack