Directory traversal vulnerability in GNU tar 1.14 through 1.29 allows remote attackers to write to arbitrary files via improper sanitization of the file_name parameter. Mitigation recommended using the "star" utility from the "star" package
Reporter | Title | Published | Views | Family All 73 |
---|---|---|---|---|
![]() | [SECURITY] [DSA 3702-1] tar security update | 1 Nov 201619:15 | β | debian |
![]() | [SECURITY] [DSA 3702-1] tar security update | 1 Nov 201619:15 | β | debian |
![]() | [SECURITY] [DLA 690-1] tar security update | 31 Oct 201616:01 | β | debian |
![]() | Ubuntu 14.04 LTS / 16.04 LTS : tar vulnerability (USN-3132-1) | 22 Nov 201600:00 | β | nessus |
![]() | EulerOS 2.0 SP3 : tar (EulerOS-SA-2020-2091) | 28 Sep 202000:00 | β | nessus |
![]() | Photon OS 1.0: Tar PHSA-2017-0015 | 7 Feb 201900:00 | β | nessus |
![]() | Debian DLA-690-1 : tar security update | 1 Nov 201600:00 | β | nessus |
![]() | EulerOS Virtualization 3.0.2.2 : tar (EulerOS-SA-2020-1449) | 16 Apr 202000:00 | β | nessus |
![]() | EulerOS Virtualization for ARM 64 3.0.2.0 : tar (EulerOS-SA-2020-1245) | 13 Mar 202000:00 | β | nessus |
![]() | openSUSE Security Update : tar (openSUSE-2016-1341) | 23 Nov 201600:00 | β | nessus |
Source | Link |
---|---|
sintonen | www.sintonen.fi/advisories/tar-extract-pathname-bypass.txt |
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo