CVE-2007-4559 Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot)....
MediumCVSS 6.8
EPSS 27.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/python2.7(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/python3.10(Ubuntu:22.04) | < 3.10.12-1~22.04.2 | 3.10.12-1~22.04.2 |
| ubuntu/python3.11(Ubuntu:22.04) | All versions | No fix listed |
| python | < 3.6.16 | 3.6.16 |
| python | >= 3.7.0, < 3.8.17 | 3.8.17 |
| python | >= 3.9.0, < 3.9.17 | 3.9.17 |
| python | >= 3.10.0, < 3.10.12 | 3.10.12 |
| python | >= 3.11.0, < 3.11.4 | 3.11.4 |
| Microsoft cbl mariner | < 3.9.19-1 | 3.9.19-1 |
| Microsoft cbl mariner | < 2.7.18-5 | 2.7.18-5 |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- [python-dev] 20070824 tarfile and directory traversal vulnerability mailing-list vendor-advisory
- [python-dev] 20070825 tarfile and directory traversal vulnerability exploit mailing-list
- 26623 broken-link third-party-advisory
- ADV-2007-3022 broken-link vdb-entry
- bugzilla.redhat.com issue-tracking
- FEDORA-2024-ebb3c95344 vendor-advisory
- FEDORA-2024-d1f1084584 vendor-advisory
- FEDORA-2024-46374d2703 vendor-advisory
- GLSA-202309-06 vendor-advisory
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- MSRC Security Update Guide vendor-advisory
- python3 vendor-advisory