Lucene search

Tardiff Security Vulnerabilities

cve

CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1) tar file or (2) file within a tar file.

9.8CVSS

9.6AI Score

0.005EPSS

2016-05-06 05:59 PM

cve

CVE-2015-0858

Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardiff-$$ temporary directory.

3.3CVSS

5.9AI Score

0.0004EPSS

2016-05-06 05:59 PM