CVE-2006-6097

2006-11-2400:00:00

ubuntu.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

0.01 Low

EPSS

Percentile

83.5%

JSON

GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted
attackers to overwrite arbitrary files via a tar file that contains a
GNUTYPE_NAMES record with a symbolic link, which is not properly handled by
the extract_archive function in extract.c and extract_mangle function in
mangle.c, a variant of CVE-2002-1216.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchtar< 1.15.1-2ubuntu2.2UNKNOWN
ubuntu6.10noarchtar< 1.15.91-2ubuntu0.4UNKNOWN
ubuntu7.04noarchtar< 1.16-2ubuntu0.1UNKNOWN