Lucene search
+L

1148 matches found

NVD
NVD
added 2007/08/28 1:17 a.m.28 views

CVE-2007-4559

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS7AI score0.27095EPSS
SaveExploits3References12
OSV
OSV
added 2007/08/28 1:17 a.m.14 views

AZL-6822 CVE-2007-4559 affecting package python2 for versions less than 2.7.18-8

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS6.9AI score0.27095EPSS
SaveExploits3References1
OSV
OSV
added 2007/08/28 1:17 a.m.11 views

UBUNTU-CVE-2007-4559

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS6.9AI score0.27095EPSS
SaveExploits3References4
OSV
OSV
added 2007/08/28 1:17 a.m.11 views

AZL-6828 CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS6.9AI score0.27095EPSS
SaveExploits3References1
CVE
CVE
added 2007/08/28 12:00 a.m.950 views

CVE-2007-4559

Summary (fact-grounded) : The connected advisory describes a directory traversal vulnerability in Python's tarfile extraction path as used by Keras’ get_file() in keras.utils.get_file(), where extractall() is called without a security filter. The root cause is a PATH_MAX symlink resolution bug th...

9.8CVSS7.2AI score0.27095EPSS
SaveExploits3References12Affected Software1
Cvelist
Cvelist
added 2007/08/28 12:00 a.m.56 views

CVE-2007-4559

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

7.2AI score0.27095EPSS
SaveExploits3References9
OSV
OSV
added 2007/08/28 12:00 a.m.22 views

PSF-2007-2 Directory path traversal in extract() and extractall() tarfile functions via '..' (dot dot) sequences

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS9.4AI score0.27095EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2007/08/24 12:00 a.m.18 views

PT-2007-1155

Name of the Vulnerable Software and Affected Versions: Python tarfile module versions affected versions not specified Description: A directory traversal vulnerability in the extract and extractall functions of the tarfile module in Python allows user-assisted remote attackers to overwrite arbitra...

9.8CVSS7.8AI score0.62402EPSS
SaveExploits8References126
Rows per page
Query Builder