CVE-2016-10173

2017-02-01T15:59:00
ID CVE-2016-10173
Type cve
Reporter cve@mitre.org
Modified 2017-12-09T02:29:00

Description

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.