Lucene search
Ubuntu.comUB:CVE-2007-4131HistoryAug 25, 2007 - 12:00 a.m.
CVE-2007-4131
2007-08-2500:00:00
ubuntu.com
ubuntu.com
11
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.9%
Directory traversal vulnerability in the contains_dot_dot function in
src/names.c in GNU tar allows user-assisted remote attackers to overwrite
arbitrary files via certain //… (slash slash dot dot) sequences in
directory symlinks in a TAR archive.
Related
openvas
openvas
Fedora Update for tar FEDORA-2007-1890
2009-02-27 00:00:00
SLES9: Security update for tar
2009-10-10 00:00:00
SLES9: Security update for tar
2009-10-10 00:00:00
freebsd
freebsd
gtar -- Directory traversal vulnerability
2007-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: tar-1.15.1-26.fc6
2007-08-30 20:51:30
[SECURITY] Fedora 7 Update: tar-1.15.1-27.fc7
2007-08-29 17:28:19
[SECURITY] Fedora 7 Update: tar-1.15.1-28.fc7
2007-10-29 19:02:35
cvelist
cvelist
CVE-2007-4131
2007-08-25 00:00:00
nessus
nessus
SuSE 10 Security Update : star (ZYPP Patch Number 4174)
2007-12-13 00:00:00
SuSE 10 Security Update : tar (ZYPP Patch Number 4125)
2007-12-13 00:00:00
Oracle Linux 4 / 5 : tar (ELSA-2007-0860)
2013-07-12 00:00:00
centos
centos
tar security update
2007-08-23 16:49:59
cve
cve
CVE-2007-4131
2007-08-25 00:17:00
redhat
redhat
(RHSA-2007:0860) Moderate: tar security update
2007-08-23 00:00:00
ubuntu
ubuntu
tar vulnerability
2007-08-28 00:00:00
prion
prion
Directory traversal
2007-08-25 00:17:00
seebug
seebug
GNU Tar contains_dot_dot函数远程目录遍历漏洞
2007-08-24 00:00:00
nvd
nvd
CVE-2007-4131
2007-08-25 00:17:00
oraclelinux
oraclelinux
Moderate: tar security update
2007-08-23 00:00:00
gentoo
gentoo
GNU Tar: Directory traversal vulnerability
2007-09-15 00:00:00
veracode
veracode
Arbitrary File Overwrite
2020-04-10 00:18:09
freebsd_advisory
freebsd_advisory
FreeBSD-SA-07:10.gtar
2007-11-29 00:00:00
debiancve
debiancve
CVE-2007-4131
2007-08-25 00:17:00
debian
debian
[SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities
2007-12-28 15:29:40
osv
osv
tar
2007-12-28 00:00:00
securityvulns
securityvulns
rPSA-2007-0172-1 tar
2007-08-27 00:00:00
Directory traversal and absolute path in multiple archivers
2007-08-27 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.9%
Related for UB:CVE-2007-4131