Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD6107EFB9-AAE3-11DA-AEA1-000854D03344
HistoryFeb 22, 2006 - 12:00 a.m.

gtar -- invalid headers buffer overflow

2006-02-2200:00:00
vuxml.freebsd.org
22

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.294

Percentile

96.9%

JSON

GNU tar is vulnerable to a buffer overflow, caused by
improper bounds checking of the PAX extended headers. By
tricking an user into processing a specially crafted tar
archive, this could be exploited to execute arbitrary
code with the privileges of the user.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgtar< 1.15.1_2UNKNOWN

Related

nessus 19
openvas 18
debiancve 1
cvelist 1
cve 1
nvd 1
ubuntucve 1
debian 2
redhat 1
prion 1
securityvulns 1
ubuntu 1
checkpoint_advisories 1
centos 1
gentoo 1
osv 1
nessus
nessus
Solaris 9 (x86) : 118192-05
2008-12-02 00:00:00
GLSA-200603-06 : GNU tar: Buffer overflow
2006-03-13 00:00:00
Solaris 9 (sparc) : 118191-05
2008-12-02 00:00:00
openvas
openvas
Solaris Update for gtar source 118194-02
2009-06-03 00:00:00
Solaris Update for gtar source 118193-02
2009-06-03 00:00:00
Gentoo Security Advisory GLSA 200603-06 (tar)
2008-09-24 00:00:00
debiancve
debiancve
CVE-2006-0300
2006-02-24 00:02:00
cvelist
cvelist
CVE-2006-0300
2006-02-24 00:00:00
cve
cve
CVE-2006-0300
2006-02-24 00:02:00
nvd
nvd
CVE-2006-0300
2006-02-24 00:02:00
ubuntucve
ubuntucve
CVE-2006-0300
2006-02-24 00:00:00
debian
debian
[SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
2006-03-07 14:19:58
[SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
2006-03-07 14:19:58
redhat
redhat
(RHSA-2006:0232) tar security update
2006-03-01 00:00:00
prion
prion
Buffer overflow
2006-02-24 00:02:00
securityvulns
securityvulns
[Full-disclosure] [ MDKSA-2006:046 ] - Updated tar packages fix vulnerability
2006-02-22 00:00:00
ubuntu
ubuntu
tar vulnerability
2006-02-23 00:00:00
checkpoint_advisories
checkpoint_advisories
GNU Tar PAX Extended Headers Handling Buffer Overflow (CVE-2006-0300)
2009-10-11 00:00:00
centos
centos
tar security update
2006-03-01 16:42:53
gentoo
gentoo
GNU tar: Buffer overflow
2006-03-10 00:00:00
osv
osv
tar-1.34-2.2 on GA media
2024-06-15 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.294

Percentile

96.9%

JSON
Related for 6107EFB9-AAE3-11DA-AEA1-000854D03344
nessus19openvas18debiancve1cvelist1cve1nvd1ubuntucve1debian2redhat1prion1securityvulns1ubuntu1checkpoint_advisories1centos1gentoo1osv1