Lucene search

K
cve[email protected]CVE-2006-0931
HistoryFeb 28, 2006 - 11:02 a.m.

CVE-2006-0931

2006-02-2811:02:00
CWE-22
web.nvd.nist.gov
20
cve-2006-0931
directory traversal
pear::archive_tar
tar archive
vulnerability
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.

Affected configurations

NVD
Node
pearpear_archive_tarRange1.2
OR
pearpear_archive_tarRange1.3.0
OR
pearpear_archive_tarRange1.3.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

Related for CVE-2006-0931