CVE:CVE-2018-10860
CNNVD:CNNVD-201807-013
perl-archive-zip是一个用于在Perl程序中创建、读取和写入ZIP文件的模块。
perl-archive-zip中存在目录遍历漏洞，该漏洞源于程序在提取zip文件时没有正确的过滤路径。攻击者可通过提交特制的归档文件利用该漏洞在perl解释器的上下文中写入或覆盖任意文件。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,and avoid the version 12.04,14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade perl-archive-zip_project perl-archive-zip to a higher version than -