CVE-2007-4559-lab

CVE-2007-4559 — TarSlip: 15年にわたるディレクトリトラバーサル 教育目的のみ。 このラボは隔離されたDockerコンテナ内で意図的にファイルシステムの脆弱性を利用します。機密データがあるシステムや本番環境では実行しないでください。 自己完結型Dockerラボで、CVE-2007-4559 — Pythonのtarfileモジュールにおける悪名高い「TarSlip」脆弱性 — を具体的なエンドツーエンドの攻撃チェーンを通じて実演します： 1. 攻撃者が細工したtarballをファイルアップロードAPIにアップロードする。 2...

MALW

CVE-2007-4559 - Polemarch エクスプロイト Polemarch サーバー https://www.polemarch.org/ 向けの完全動作するエクスプロイト。CVE-2007-4559 を使用し、以下を可能にします: TOR を使用して追跡を困難にする Monero クリプトマイナーの注入。 一般的なシステム管理ツールを標的とするルートキットの注入。 POC https://vulners.com/cve/CVE-2007-4559 を使用した概念実証であり、...

Creosote

Creosote Creosote は、CVE-2007-4559 で説明されている tarfile の脆弱性を検索するためのソリューションです。このツールは、指定されたディレクトリを再帰的に走査し、Python ファイルを探します。Python ファイルが見つかると、tarfile モジュールをスキャンし、コードを AST に解析して脆弱性のあるコードを探します。 Creosote は、見つかったすべての脆弱性を次の 3 つの主要カテゴリに分類します。 Vuln: これはツールが提供する最高の信頼度レベルであり、Vuln とマークされたものはすべて分析する必要があります。 Probab...

wargame-tarpioka

BubbleTea CVE-2007-4559 「.tar」を使用したディレクトリトラバーサル脆弱性により../../flag path root@kitploit: BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py 現在のビルド手順 dockerの確認 docker ps docker images docker build -t tarpioka docker run -d -it --name...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass 2023年、TrellixはCVE-2007-4559（古いパストラバーサル脆弱性）に対して、+61,000のオープンソースプロジェクトにパッチを適用したと発表しました1。彼らのパッチを分析すると、シンボリックリンクを使用してバイパスできることが簡単にわかります。 シンボリックリンクによるパストラバーサルは古い手法であり、LiveOverflowの動画 重大な.zip脆弱性？ - Zip SlipとZipperDownでも紹介されています。 1 Trellix Advanced Research...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in DataView. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA...

Exploit for Path Traversal in Python

CVE-2007-4559 — TarSlip: The 15-Year Directory Traversal...

python38:3.8 and python38-devel:3.8 security update

An update is available for module.modwsgi, module.python-psutil, python-packaging, module.Cython, module.python3x-setuptools, module.python-wcwidth, module.python-ply, python-psycopg2, python-psutil, python-chardet, module.python-pluggy, python-lxml, python-pysocks, python-wcwidth, python-pluggy,...

RockyLinux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2023:7034)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7034 advisory. python: tarfile module directory traversal CVE-2007-4559 python-requests: Unintended leak of Proxy-Authorization header CVE-2023-32681 Tenable has...

RockyLinux 8 : python38:3.8 and python38-devel:3.8 (RLSA-2023:7050)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:7050 advisory. python: tarfile module directory traversal CVE-2007-4559 python-requests: Unintended leak of Proxy-Authorization header CVE-2023-32681 Tenable has...

SUSE: Security Advisory (SUSE-SU-2026:0210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MiracleLinux 9 : python3.9-3.9.18-1.el9 (AXSA:2023-6804:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6804:05 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : python3-3.6.8-56.el8.ML.1 (AXSA:2023-7212:08)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7212:08 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : python3.11-pip-22.3.1-4.el8 (AXSA:2023-7138:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7138:02 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 9 : python-pip-21.2.3-7.el9 (AXSA:2023-6874:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6874:01 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 9 : python3.11-pip-22.3.1-4.el9 (AXSA:2023-6924:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6924:01 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 8 : python-pip-9.0.3-23.el8 (AXSA:2023-7234:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-7234:02 advisory. python: tarfile module directory traversal CVE-2007-4559 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : python3-3.6.8-21.0.4.el7.AXS7 (AXSA:2025-11000:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-11000:05 advisory. CVE-2007-4559: implement PEP 706 a filter in the tarfile module to prevent directory traversal vulnerability CVEs: CVE-2007-4559 Directory traversal...

TencentOS Server 3: python3.11-pip (TSSA-2023:0278)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0278 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 3: python3 (TSSA-2023:0299)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0299 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...