Lucene search
+L

5749 matches found

Fedora
Fedora
added 2007/11/05 2:56 p.m.33 views

[SECURITY] Fedora Core 6 Update: cpio-2.6-22.fc6

GNU cpio copies files into or out of a cpio or tar archive. Archives are files which contain a collection of other files plus information about them, such as their file name, owner, timestamps, and access permissions. The archive can be another file on the disk, a magnetic tape, or a pipe. GNU cp...

7.5CVSS0.5AI score0.14902EPSS
SaveExploits3
Fedora
Fedora
added 2007/11/05 2:40 p.m.38 views

[SECURITY] Fedora Core 6 Update: tar-1.15.1-27.fc6

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

7.5CVSS1.5AI score0.14902EPSS
SaveExploits3
NVD
NVD
added 2007/11/02 4:46 p.m.30 views

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

6.8CVSS6.5AI score0.04322EPSS
SaveExploits1References15
Prion
Prion
added 2007/11/02 4:46 p.m.21 views

Directory traversal

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

6.8CVSS6.5AI score0.04322EPSS
SaveExploits1References15Affected Software1
OSV
OSV
added 2007/11/02 4:46 p.m.5 views

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

6.5AI score
SaveExploits0References18
CVE
CVE
added 2007/11/02 4:0 p.m.114 views

CVE-2007-4829

The CVE-2007-4829 entry concerns a directory-traversal flaw in the Archive::Tar Perl module (versions

6.8CVSS6.3AI score0.04322EPSS
SaveExploits1References15Affected Software1
Debian CVE
Debian CVE
added 2007/11/02 4:0 p.m.23 views

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

6.8CVSS6.4AI score0.04322EPSS
SaveExploits1
Cvelist
Cvelist
added 2007/11/02 4:0 p.m.31 views

CVE-2007-4829

Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an absolute path or has ".." sequences...

6.3AI score0.04322EPSS
SaveExploits1References15
Fedora
Fedora
added 2007/10/29 7:2 p.m.52 views

[SECURITY] Fedora 7 Update: tar-1.15.1-28.fc7

The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that archive. Tar can also be used to add supplemental files to an archive and to update or list files in the archive. Tar includes multivolume support, automatic archive...

7.5CVSS1.6AI score0.14902EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2007/10/25 12:0 a.m.40 views

GLSA-200710-23 : Star: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200710-23 Star: Directory traversal vulnerability Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the hasdotdot function which does not identify //.. slash slash dot dot sequences in...

6.8CVSS5.7AI score0.03009EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.31 views

Mandrake Linux Security Advisory : tar (MDKSA-2007:197)

A buffer overflow in GNU tar has unspecified attack vectors and impact, resulting in a crashing stack. Updated packages fix this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux Security Advisory...

7.5CVSS7.4AI score0.14902EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.35 views

openSUSE 10 Security Update : tar (tar-2351)

This security update fixes a directory traversal in tar, where unpacked symlinks could be followed outside of the directory where the tar file is unpacked. CVE-2006-6097 This feature was made optional and needs to be enabled with a commandline option. %NASLMINLEVEL 70300 C Tenable Network Securit...

4CVSS7.1AI score0.10736EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.19 views

openSUSE 10 Security Update : tar (tar-4170)

This update fixes a bug in function safernamesuffix of tar which leads to a crashing stack. Exploitability is unknown. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tar-4170. The text...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.29 views

openSUSE 10 Security Update : tar (tar-4124)

This update fixes a directory traversal bug in tar. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tar-4124. The text description of this plugin is C SUSE LLC...

6.8CVSS7.6AI score0.02743EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2007/09/24 12:0 a.m.18 views

GLSA-200709-09 : GNU Tar: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200709-09 GNU Tar: Directory traversal vulnerability Dmitry V. Levin discovered a directory traversal vulnerability in the containsdotdot function in file src/names.c. Impact : By enticing a user to extract a specially crafted tar...

6.8CVSS7.5AI score0.02743EPSS
SaveExploits1References2
Gentoo Linux
Gentoo Linux
added 2007/09/15 12:0 a.m.31 views

GNU Tar: Directory traversal vulnerability

Background The GNU Tar program provides the ability to create tar archives, as well as various other kinds of manipulation. Description Dmitry V. Levin discovered a directory traversal vulnerability in the containsdotdot function in file src/names.c. Impact By enticing a user to extract a special...

6.8CVSS7.4AI score0.02743EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2007/09/05 1:17 a.m.35 views

CVE-2007-4476

Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...

7.5CVSS7.1AI score0.14902EPSS
SaveExploits3References5
NVD
NVD
added 2007/09/05 1:17 a.m.23 views

CVE-2007-4476

Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...

7.5CVSS6.5AI score0.14902EPSS
SaveExploits3References37
Prion
Prion
added 2007/09/05 1:17 a.m.26 views

Buffer overflow

Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...

7.5CVSS6.5AI score0.14902EPSS
SaveExploits3References37Affected Software3
OSV
OSV
added 2007/09/05 1:17 a.m.8 views

CVE-2007-4476

Buffer overflow in the safernamesuffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."...

6.5AI score
SaveExploits0References39
Rows per page
Query Builder