[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite

🗓️ 01 Dec 2006 16:26:11Reported by DebianType

Vulnerability in GNU tar allows arbitrary file overwrite via specially crafted tar file containing a symbolic link. Upgrade to tar version 1.14-2.3 or 1.16-2

Reporter	Title	Published	Views	Family All 55
Tenable Nessus	Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)	13 Mar 200700:00	–	nessus
Tenable Nessus	CentOS 3 / 4 : tar (CESA-2006:0749)	30 Dec 200600:00	–	nessus
Tenable Nessus	Debian DSA-1223-1 : tar - input validation error	4 Dec 200600:00	–	nessus
Tenable Nessus	FreeBSD : gtar -- GNUTYPE_NAMES directory traversal vulnerability (3dd7eb58-80ae-11db-b4ec-000854d03344)	4 Dec 200600:00	–	nessus
Tenable Nessus	GLSA-200612-10 : Tar: Directory traversal vulnerability	14 Dec 200600:00	–	nessus
Tenable Nessus	Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)	13 Mar 200700:00	–	nessus
Tenable Nessus	Mandrake Linux Security Advisory : tar (MDKSA-2006:219)	18 Feb 200700:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 4.06 : tar Multiple Vulnerabilities (NS-SA-2019-0089)	12 Aug 201900:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 4.05 : tar Multiple Vulnerabilities (NS-SA-2019-0153)	12 Aug 201900:00	–	nessus
Tenable Nessus	Oracle Linux 3 / 4 : tar (ELSA-2006-0749)	12 Jul 201300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	3.1	any	tar	1.14-2.3	tar_1.14-2.3_any.deb

01 Dec 2006 16:26Current

7.9High risk

Vulners AI Score7.9

CVSS 24

EPSS0.11084