Gentoo Linux Security Advisory GLSA 200612-10
https://security.gentoo.org/
Severity: Normal
Title: Tar: Directory traversal vulnerability
Date: December 11, 2006
Bugs: #155901
ID: 200612-10
Synopsis
=======
Tar is vulnerable to directory traversal possibly allowing for the
overwriting of arbitrary files.
Background
=========
The Tar program provides the ability to create and manipulate tar
archives.
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 app-arch/tar < 1.16-r2 >= 1.16-r2
==========
Tar does not properly extract archive elements using the GNUTYPE_NAMES
record name, allowing files to be created at arbitrary locations using
symlinks. Once a symlin...
style>.gentoo_availability{display:block;}
Get the latest Linux and open source security news straight to your inbox.