tar vulnerability

2007-08-2800:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

JSON

Releases

Ubuntu 7.04
Ubuntu 6.10
Ubuntu 6.06

Packages

tar -

Details

Dmitry V. Levin discovered that tar did not correctly detect the “…”
file path element when unpacking archives. If a user or an automated
system were tricked into unpacking a specially crafted tar file, arbitrary
files could be overwritten with user privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchtar< 1.16-2ubuntu0.1UNKNOWN
Ubuntu6.10noarchtar< 1.15.91-2ubuntu0.4UNKNOWN
Ubuntu6.06noarchtar< 1.15.1-2ubuntu2.2UNKNOWN