Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4134
HistoryAug 30, 2007 - 12:00 a.m.

CVE-2007-4134

2007-08-3000:00:00
ubuntu.com
ubuntu.com
9

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%

Directory traversal vulnerability in extract.c in star before 1.5a84 allows
user-assisted remote attackers to overwrite arbitrary files via certain
//… (slash slash dot dot) sequences in directory symlinks in a TAR
archive.

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchstar< 1.5a67-1.1ubuntu1UNKNOWN
ubuntu8.04noarchstar< 1.5a67-1.1ubuntu1UNKNOWN
ubuntu8.10noarchstar< 1.5a67-1.1ubuntu1UNKNOWN
ubuntu9.04noarchstar< 1.5a67-1.1ubuntu1UNKNOWN
ubuntu9.10noarchstar< 1.5a67-1.1ubuntu1UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.8%