medium5.0
CVE-2002-0399
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive…
Impact
Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Tar | Version 1.13.25 |
References
- NVD record
- CVE.org record
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538
- http://marc.info/?l=bugtraq&m=103419290219680&w=2
- http://secunia.com/advisories/19130
- http://secunia.com/advisories/26604
- http://secunia.com/advisories/26673
- http://secunia.com/advisories/26987
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1
- http://www.iss.net/security_center/static/10224.php
- http://www.linuxsecurity.com/advisories/other_advisory-2400.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2002:066
- http://www.novell.com/linux/security/advisories/2006_05_sr.html
- http://www.novell.com/linux/security/advisories/2007_19_sr.html
- http://www.redhat.com/support/errata/RHSA-2002-096.html
- http://www.securityfocus.com/archive/1/477731/100/0/threaded
- http://www.securityfocus.com/archive/1/477865/100/0/threaded
- http://www.securityfocus.com/bid/5834
- https://issues.rpath.com/browse/RPL-1631
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538
- http://marc.info/?l=bugtraq&m=103419290219680&w=2
- http://secunia.com/advisories/19130
- http://secunia.com/advisories/26604
- http://secunia.com/advisories/26673
- http://secunia.com/advisories/26987
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1