Vulnerability in the UnRaR leads to code execution in Zimbra

Threat Level

Vulnerability Report

For a detailed advisory, download the pdf file here

Summary

Unrar has a path traversal vulnerability that allows an unauthenticated attacker to execute arbitrary commands as a Zimbra user and escalate privileges.