Back

CVE-2005-1080

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

Published: May 2, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
sun sdk 1.4.2
sun sdk 1.5

GitHub Security Advisory GHSA-g7vc-f4x5-69xx

Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 5.85%

Top 7% most likely to be exploited

Threat Score 21.8 / 100

Data Sources

NVD EPSS GitHub