Archive-Zip 1.12
- Released by
- NEDKONZ
- Version
- Release Date
- 2004-07-09
- Kwalitee
- 140.62
- Core Kwalitee
- 93.75
- LINKS
Archive-Zip 1.12 Deleted
Security Advisories
CVE-2018-10860
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or overwrite arbitrary files in the context of the perl interpreter.
- https://security-tracker.debian.org/tracker/CVE-2018-10860
- https://github.com/redhotpenguin/perl-Archive-Zip/pull/33
Severity: medium
Reported: 2018-06-28
CVE-2004-1096
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
- http://www.securityfocus.com/bid/11448
- http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/492545
- http://secunia.com/advisories/13038/
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:118
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
Reported: 2005-01-10
Kwalitee Issues
- manifest_matches_dist
-
Run a proper command ("make manifest" or "./Build manifest", maybe with a force option), or use a distribution builder to generate the MANIFEST. Or update MANIFEST manually.
Error:
- MANIFEST (45) does not match dist (44):
- Duplicates in MANIFEST: examples/ziptest.pl
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Archive::Zip::Tree
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Archive::Zip, Archive::Zip::BufferedFileHandle, Archive::Zip::MemberRead, Archive::Zip::MockFileHandle, Archive::Zip::Tree
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
- meta_yml_has_repository_resource
-
Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Provides
| Name | File | View |
|---|---|---|
| Archive::Zip::Archive | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::DirectoryMember | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::FileMember | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::Member | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::NewFileMember | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::StringMember | lib/Archive/Zip.pm | metacpan |
| Archive::Zip::ZipFileMember | lib/Archive/Zip.pm | metacpan |