Lucene search
FreeBSD3DD7EB58-80AE-11DB-B4EC-000854D03344HistoryNov 21, 2006 - 12:00 a.m.
gtar -- GNUTYPE_NAMES directory traversal vulnerability
2006-11-2100:00:00
vuxml.freebsd.org
15
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.01 Low
EPSS
Percentile
83.6%
Teemu Salmela reports:
There is a tar record type, called GNUTYPE_NAMES (an
obsolete GNU extension), that allows the creation of
symbolic links pointing to arbitrary locations in the
filesystem, which makes it possible to create/overwrite
arbitrary files.
Related
nessus
nessus
RHEL 2.1 / 3 / 4 : tar (RHSA-2006:0749)
2006-12-30 00:00:00
openSUSE 10 Security Update : tar (tar-2351)
2007-10-17 00:00:00
openSUSE 10 Security Update : tar (tar-2343)
2007-10-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200612-10 (tar)
2008-09-24 00:00:00
SLES9: Security update for tar
2009-10-10 00:00:00
FreeBSD Ports: gtar
2008-09-04 00:00:00
debian
debian
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
2006-12-01 16:26:11
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
2006-12-01 16:26:11
oraclelinux
oraclelinux
Moderate tar security update
2006-12-20 00:00:00
centos
centos
tar security update
2006-12-20 03:41:54
tar security update
2006-12-20 15:42:51
redhat
redhat
(RHSA-2006:0749) Moderate: tar security update
2006-12-19 00:00:00
freebsd
freebsd
gtar -- name mangling symlink vulnerability
2006-12-06 00:00:00
gentoo
gentoo
Tar: Directory traversal vulnerability
2006-12-11 00:00:00
slackware
slackware
[slackware-security] tar
2006-12-01 22:55:57
ubuntu
ubuntu
tar vulnerability
2006-11-27 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:26.gtar
2006-12-06 00:00:00
debiancve
debiancve
CVE-2006-6097
2006-11-24 18:07:00
cve
cve
CVE-2006-6097
2006-11-24 18:07:00
ubuntucve
ubuntucve
CVE-2006-6097
2006-11-24 00:00:00
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.01 Low
EPSS
Percentile
83.6%
Related for 3DD7EB58-80AE-11DB-B4EC-000854D03344