Lucene search
Ubuntu.comUB:CVE-2006-6097HistoryNov 24, 2006 - 12:00 a.m.
CVE-2006-6097
2006-11-2400:00:00
ubuntu.com
ubuntu.com
18
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.014
Percentile
86.6%
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted
attackers to overwrite arbitrary files via a tar file that contains a
GNUTYPE_NAMES record with a symbolic link, which is not properly handled by
the extract_archive function in extract.c and extract_mangle function in
mangle.c, a variant of CVE-2002-1216.
Related
cve
cve
CVE-2006-6097
2006-11-24 18:07:00
CVE-2002-1216
2002-10-28 05:00:00
nessus
nessus
Mandrake Linux Security Advisory : tar (MDKSA-2006:219)
2007-02-18 00:00:00
Oracle Linux 3 / 4 : tar (ELSA-2006-0749)
2013-07-12 00:00:00
GLSA-200612-10 : Tar: Directory traversal vulnerability
2006-12-14 00:00:00
cvelist
cvelist
CVE-2006-6097
2006-11-24 18:00:00
CVE-2002-1216
2002-10-21 04:00:00
debiancve
debiancve
CVE-2006-6097
2006-11-24 18:07:00
CVE-2002-1216
2002-10-28 05:00:00
nvd
nvd
CVE-2006-6097
2006-11-24 18:07:00
CVE-2002-1216
2002-10-28 05:00:00
openvas
openvas
SLES9: Security update for tar
2009-10-10 00:00:00
Slackware Advisory SSA:2006-335-01 tar
2012-09-11 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-06:26.gtar.asc)
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
2006-12-01 16:26:11
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
2006-12-01 16:26:11
redhat
redhat
(RHSA-2006:0749) Moderate: tar security update
2006-12-19 00:00:00
oraclelinux
oraclelinux
Moderate tar security update
2006-12-20 00:00:00
centos
centos
tar security update
2006-12-20 03:41:54
tar security update
2006-12-20 15:42:51
exploitdb
exploitdb
GNU Tar 1.1x - 'GNUTYPE_NAMES' Directory Traversal
2006-11-21 00:00:00
gentoo
gentoo
Tar: Directory traversal vulnerability
2006-12-11 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:26.gtar
2006-12-06 00:00:00
freebsd
freebsd
gtar -- name mangling symlink vulnerability
2006-12-06 00:00:00
gtar -- GNUTYPE_NAMES directory traversal vulnerability
2006-11-21 00:00:00
ubuntu
ubuntu
tar vulnerability
2006-11-27 00:00:00
slackware
slackware
[slackware-security] tar
2006-12-01 22:55:57
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
0.014
Percentile
86.6%
Related for UB:CVE-2006-6097