Lucene search
GoogleOSV:DSA-3702-1HistoryNov 01, 2016 - 12:00 a.m.
tar - security update
2016-11-0100:00:00
Google
osv.dev
15
EPSS
0.005
Percentile
76.1%
Harry Sintonen discovered that GNU tar does not properly handle member
names containing ββ¦β, thus allowing an attacker to bypass the path
names specified on the command line and replace files and directories in
the target directory.
For the stable distribution (jessie), this problem has been fixed in
version 1.27.1-2+deb8u1.
For the unstable distribution (sid), this problem has been fixed in
version 1.29b-1.1.
We recommend that you upgrade your tar packages.
References
Related
debian
debian
[SECURITY] [DSA 3702-1] tar security update
2016-11-01 19:15:47
[SECURITY] [DSA 3702-1] tar security update
2016-11-01 19:15:47
[SECURITY] [DLA 690-1] tar security update
2016-10-31 16:01:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0386)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2020-2091)
2020-09-29 00:00:00
Ubuntu: Security Advisory (USN-3132-1)
2016-11-22 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : tar vulnerability (USN-3132-1)
2016-11-22 00:00:00
EulerOS 2.0 SP3 : tar (EulerOS-SA-2020-2091)
2020-09-28 00:00:00
Photon OS 1.0: Tar PHSA-2017-0015
2019-02-07 00:00:00
alpinelinux
alpinelinux
CVE-2016-6321
2016-12-09 22:59:00
cvelist
cvelist
CVE-2016-6321
2016-12-09 22:00:00
cve
cve
CVE-2016-6321
2016-12-09 22:59:00
ubuntu
ubuntu
tar vulnerability
2016-11-21 00:00:00
cloudfoundry
cloudfoundry
USN-3132-1: tar vulnerability | Cloud Foundry
2016-12-14 00:00:00
ubuntucve
ubuntucve
CVE-2016-6321
2016-10-28 00:00:00
gentoo
gentoo
Tar: Extract pathname bypass
2016-11-22 00:00:00
redhatcve
redhatcve
CVE-2016-6321
2016-10-27 07:47:17
altlinux
altlinux
Security fix for the ALT Linux 8 package tar version 1.29.0.19.d061-alt1
2017-03-28 00:00:00
mageia
mageia
Updated tar packages fix security vulnerability
2016-11-18 02:40:52
seebug
seebug
GNU tarοΌPOINTYFEATHERοΌ decompression path bypass vulnerability
2016-11-07 00:00:00
osv
osv
CVE-2016-6321
2016-12-09 22:59:00
tar - security update
2016-10-31 00:00:00
tar-1.29-2.1 on GA media
2024-06-15 00:00:00
nvd
nvd
CVE-2016-6321
2016-12-09 22:59:00
prion
prion
Directory traversal
2016-12-09 22:59:00
archlinux
archlinux
[ASA-201611-11] tar: arbitrary file overwrite
2016-11-03 00:00:00
packetstorm
packetstorm
GNU tar 1.29 Extract Pathname Bypass
2016-10-27 00:00:00
debiancve
debiancve
CVE-2016-6321
2016-12-09 22:59:00
veracode
veracode
Directory Traversal
2021-10-01 05:13:26
ibm
ibm
