Lucene search

K
cve[email protected]CVE-2001-1267
HistorySep 01, 2004 - 4:00 a.m.

CVE-2001-1267

2004-09-0104:00:00
web.nvd.nist.gov
53
4
cve-2001-1267
gnu tar
directory traversal vulnerability
nvd
archive extraction

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a … (dot dot).

Affected configurations

NVD
Node
gnutarRange1.13.19
CPENameOperatorVersion
gnu:targnu tarle1.13.19

Social References

More

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%