CVE-2002-1425: John G. Myers Mpack

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.

Affected products

• John G. Myers Mpack: up to and including 1.5

Published 2003-04-11. Last modified 2026-06-16.