CVE-2007-4131 Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) s...
MediumCVSS 6.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the contains_dot_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. (slash slash dot dot) sequences in directory symlinks in a TAR archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU tar | = 1.13 | No fix listed |
| GNU tar | = 1.13.5 | No fix listed |
| GNU tar | = 1.13.11 | No fix listed |
| GNU tar | = 1.13.14 | No fix listed |
| GNU tar | = 1.13.16 | No fix listed |
| GNU tar | = 1.13.17 | No fix listed |
| GNU tar | = 1.13.18 | No fix listed |
| GNU tar | = 1.13.19 | No fix listed |
| GNU tar | = 1.13.25 | No fix listed |
| GNU tar | = 1.14 | No fix listed |
| GNU tar | = 1.14.90 | No fix listed |
| GNU tar | = 1.15 | No fix listed |
| GNU tar | = 1.15.1 | No fix listed |
| GNU tar | = 1.15.90 | No fix listed |
| GNU tar | = 1.15.91 | No fix listed |
| GNU tar | = 1.16 | No fix listed |
| debian/tar(Debian:12) | < 1.18-2 | 1.18-2 |
| debian/tar(Debian:13) | < 1.18-2 | 1.18-2 |
| debian/tar(Debian:14) | < 1.18-2 | 1.18-2 |
References
- bugzilla.redhat.com
- docs.info.apple.com
- APPLE-SA-2007-12-17 vendor-advisory
- 26573 third-party-advisory
- 26590 third-party-advisory
- 26603 third-party-advisory
- 26604 third-party-advisory
- 26655 third-party-advisory
- 26673 third-party-advisory
- 26674 third-party-advisory
- 26781 third-party-advisory
- 26822 third-party-advisory
- 26984 third-party-advisory
- 27453 third-party-advisory
- 27861 third-party-advisory
- 28136 third-party-advisory
- 28255 third-party-advisory
- FreeBSD-SA-07:10 vendor-advisory
- GLSA-200709-09 vendor-advisory
- 1021680 vendor-advisory
- support.avaya.com
- DSA-1438 vendor-advisory
- MDKSA-2007:173 vendor-advisory
- SUSE-SR:2007:018 vendor-advisory
- RHSA-2007:0860 patch vendor-advisory
- 20070825 rPSA-2007-0172-1 tar mailing-list
- 20070827 FLEA-2007-0049-1 tar mailing-list
- 25417 vdb-entry
- 1018599 vdb-entry
- 2007-0026 vendor-advisory
- USN-506-1 vendor-advisory
- TA07-352A third-party-advisory us-government-resource
- ADV-2007-2958 vdb-entry
- ADV-2007-4238 vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10420 signature vdb-entry
- oval:org.mitre.oval:def:7779 signature vdb-entry
- FEDORA-2007-2673 vendor-advisory
- Debian Security Tracker CVE-2007-4131 vendor-advisory
- bugs.debian.org issue-tracking