CVE-2007-4559

Summary (fact-grounded) : The connected advisory describes a directory traversal vulnerability in Python's tarfile extraction path as used by Keras’ get_file() in keras.utils.get_file(), where extractall() is called without a security filter. The root cause is a PATH_MAX symlink resolution bug th...

PSF-2007-2 Directory path traversal in extract() and extractall() tarfile functions via '..' (dot dot) sequences

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

PT-2007-1155

Name of the Vulnerable Software and Affected Versions: Python tarfile module versions affected versions not specified Description: A directory traversal vulnerability in the extract and extractall functions of the tarfile module in Python allows user-assisted remote attackers to overwrite arbitra...