PT-2018-2673

Name of the Vulnerable Software and Affected Versions PEAR Archive Tar versions 1.4.3 and earlier Description The issue is related to the Archive Tar class, where several file operations use the $v header'filename' parameter. This can be exploited by crafting a tar file with a malicious path,...