CVE:CVE-2004-1027
CNNVD:CNNVD-200503-030
unarj中的-x(抽取)命令行选项中存在目录遍历漏洞，远程攻击者可以通过文件名含有..序列的arj归档文件覆盖任意文件。
solution:Upgrade arj_software_inc. unarj to a higher version than 2.62,2.63_a,2.64,2.65,and avoid the version 2.62,2.63_a,2.64,2.65; Upgrade gentoo linux to a higher version than *