Lucene search

K
cve[email protected]CVE-2001-1267
HistorySep 01, 2004 - 4:00 a.m.

CVE-2001-1267

2004-09-0104:00:00
web.nvd.nist.gov
53
4
cve-2001-1267
gnu tar
directory traversal vulnerability
nvd
archive extraction

6.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%

Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a … (dot dot).

Affected configurations

NVD
Node
gnutarRange1.13.19
CPENameOperatorVersion
gnu:targnu tarle1.13.19

Social References

More

6.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.1%