CVE-2001-1267 Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
LowCVSS 2.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU tar | <= 1.13.19 | No fix listed |
References
- CLA-2002:538 vendor-advisory
- HPSBTL0209-068 vendor-advisory
- 20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers exploit mailing-list patch vendor-advisory
- 47800 vendor-advisory
- archive-extraction-directory-traversal(10224) vdb-entry vendor-advisory
- MDKSA-2002:066 vendor-advisory
- RHSA-2002:096 patch vendor-advisory
- RHSA-2002:138 vendor-advisory
- RHSA-2003:218 vendor-advisory
- 3024 vdb-entry