Menu

#419 7z password - "potentially dangerous command detected"

Fixed
nobody
Medium
Defect
2017-01-01
2016-06-16
No

Unable to enter password for 7z archive. See attached screenshot.

File: http://download.savannah.gnu.org/releases/retux/0.7/retux-0.7-win32.7z

Password is:

[C^03C`0JS|J-PiAM#:05}!BP^LP
1 Attachments

Discussion

  • Giorgio Tani

    Giorgio Tani - 2016-06-16

    Hi, the password contain "|" pipe command concatenation character.
    At current level of development PeaZip stops any command line containing user-provided command directives characters (i.e. <, >, | ), even if used legitimately as in this case.
    Of course in this example the character is quoted, so a correctly implemented system parser should not read that character as pipe request; PeaZip's internal parser for stopping potenitally dangerous commands should be improved to allow those cases.

     
  • Hern0pa

    Hern0pa - 2016-09-22

    Damnit. I have the exact same issue.
    The archive was created under Windows7 and now I can't decrypt it under Linux. :(

    Would be nice to have this fixed if possible. ;)
    I'll try using p7zip for now.

     
  • Hern0pa

    Hern0pa - 2016-09-22

    It worked for me with "7z x archive.7z"

     

    Last edit: Hern0pa 2016-09-22
  • Giorgio Tani

    Giorgio Tani - 2017-01-01

    Fixed in new PeaZip versions, command parsing was improved to detect usage of special characters in password field.

     
  • Giorgio Tani

    Giorgio Tani - 2017-01-01
    • status: New --> Fixed
     

Log in to post a comment.

MongoDB Logo MongoDB